Clear drawings. Clear data boundaries.
AI recognition runs on your device. That does not mean the website never sends data: online play shares artwork, and optional quality measurement sends results.
Data, purposes and retention
| Feature | Data | Purpose and recipients | Retention |
|---|---|---|---|
| Solo and Prompt Album | Canvas pixels, stroke coordinates, local recognition features, seen prompts and local learning. | Recognition, feedback and progress on this browser. No drawing or recognition vector is submitted by Solo or the Album. | Browser storage; kept until site data is cleared or the local record limits replace older items. Learning is capped at 1,000 samples and Lab history at 2,000 attempts. |
| Friend Room and Quick Match | Room code, random request and session identifiers, alias, prompt IDs, recognition results, confidence, timing, and compact encoded stroke previews. | The application service stores match state; the other player receives the alias, results and finished sketch previews. These coordinates can reconstruct a drawing even though they are not a pixel-image upload. | Room access expires after the room’s short lifetime (normally about 30 minutes, renewed for a new match). Expired rows are deleted in bounded batches when later rooms are created, not by a guaranteed wall-clock deletion job. |
| Matchmaking and abuse limits | A signed first-party session cookie, protected session/network hashes, queue status, timestamps and request counters. The network request itself exposes an IP address to the hosting infrastructure. | The service uses these for joining, reconnecting, rate limits and pairing. Raw IP addresses are not stored in application tables; the network address is processed to create a keyed hash. | Session cookie: up to 24 hours. Queue tickets begin with a two-minute expiry and may be extended during pairing. Expired queue/rate rows are cleaned during later requests. Clearing cookies starts a different anonymous session. |
| Optional quality measurement | Random run ID, six prompt IDs, time allowance, recognised/not-recognised outcomes and times rounded to half a second. No drawing or name in this payload. | Only sent after “Help improve Wisp” is enabled; Global Privacy Control disables it. An anonymous session and request-rate protection also apply. Aggregates hide small groups. | Marked to expire after 30 days and excluded after expiry; deletion occurs during later cleanup requests. Turning the option off prevents future submissions but does not withdraw previously submitted records. |
| Reports and blocks | Match reference, chosen reason, hashed player credentials, and, for reports, the opponent’s available submitted sketch data. Blocks may include anonymous-session hashes. | Reports are stored for operator review; they are not monitored in real time. Blocking closes the current room and excludes the anonymous pairing while the block is active. | Reports: marked to expire after 30 days. Blocks: 24 hours. Bounded cleanup runs when later safety actions are submitted. Changing anonymous identity can bypass a block. Friend-room blocks close that room, not every future room with that person. |
| Hosting and delivery | Page/model requests, IP address, request headers and operational traffic handled by hosting providers. | ChatGPT Sites and its Cloudflare runtime deliver the application and models. The application does not integrate advertising pixels, third-party analytics scripts or an external browser error-monitoring SDK. | Hosting-provider log and backup retention has not been independently verified. Application expiry settings do not establish the provider’s deletion schedule. This remains a production privacy-review dependency. |
Your choices
Leave optional quality measurement off to avoid those records. Leave an online room to stop sending further match updates. Hide the opponent’s artwork whenever you do not want to see it. Use a made-up alias and keep personal details out of drawings.
To remove device-local information, clear this website’s browser storage, including both old and new brand storage retained for migration. Export the Prompt Album first if you want to keep it. Clearing local storage does not delete already shared match data, safety reports or provider logs.
Moving to a different website address
Different domains have separate browser storage. Renaming local storage on the same address copies legacy values without overwriting current values. The progress-transfer page exports album progress to a local file; import reads that file on your device. This does not send a backup to our server. Personal recognition-learning data is not yet included in that cross-domain export.
Children and online artwork
The game does not request a real name, date of birth, voice, precise location or an uploaded avatar. We cannot determine a player’s age from an anonymous session. A parent or guardian should help children choose online play and decide whether to reveal another player’s sketches. Recognition is not an automated safety review.
Contact and deletion requests
Email privacy@drawwisp.com for privacy questions, access or deletion requests, safety matters and report follow-up. Keep the safety reference or minimum room/match reference where available; never send a room token, password or identity document. Anonymous play and limited retention can restrict what can be found. This mailbox is the designated public address but cannot be treated as operational until successful receipt is verified.