Privacy

Where your artwork goes.

Effective date: 2026-10-10.

Who operates Drawcula

Binary Business (CVR 38836234), Denmark, is responsible for this website and the personal information you send to us. Your local artwork is not sent to us by drawing or saving.

Visiting this website

This website and the browser drawing app at app.drawcula.io are served by Cloudflare. Your browser sends the requested page address, IP address and ordinary connection and browser information so the page can be delivered and the service protected. We do not add advertising, analytics scripts, a visitor account, a drawing upload or our own visitor database. The informational pages set no application cookies and store no data in your browser. The drawing app uses browser storage for your papers and settings, and caches application files for offline use. Artwork stays on your device; it is not part of the hosted application assets.

Cloudflare processes traffic and security information under its privacy policy. Its handling is separate from local storage in the drawing app. Our purpose is delivering and protecting the website, based on our legitimate interest in running a reliable service.

When you email us

If you contact support or privacy, we receive your email address, message and any attachments you choose to send. Cloudflare Email Routing forwards messages to our Google-hosted mailbox; replies use support@binarybusiness.me. These providers process the correspondence to deliver and store it. Do not send passwords or API keys. Artwork is needed only if you choose to include it to explain an issue.

We use correspondence to answer and follow up on your request, based on our legitimate interest in providing support and, where applicable, our legal obligation to respond to a privacy request. It remains in our mailbox independently of app installation or deletion. We retain it for those purposes or to handle legal obligations or disputes; there is no automatic deletion tied to uninstalling the app. Contact us to request access or deletion.

Cloudflare and Google may process information outside the European Economic Area. Their applicable contractual safeguards and privacy information describe that processing: Cloudflare data protection terms and Google privacy policy. We do not promise that a website visit or support email stays only in Denmark.

Local drawing and saving

Drawcula stores artwork, papers, settings and source documents locally. The browser app stores them for app.drawcula.io in the browser profile you use; other browsers, devices, the homepage and the Android app do not share that storage. You can draw and save without an account. After the complete app has been cached, it can reopen offline. Android backup is disabled for the Android app.

Clearing site or app data, removing a browser profile or uninstalling the app can remove local papers. Private-browsing storage may be temporary, and browsers can reclaim storage. Export wanted work before doing either.

Files you choose

In the browser, opening uses a file picker and exporting downloads a file using your browser settings. In the Android app, Android asks you to choose a document provider and location. A provider you choose may be a cloud service with its own terms. Exported files remain at the destination you selected.

Your optional private server

The public browser app does not connect to a drawing server, Google Drive or an AI provider. Private/self-hosted editions may connect an HTTPS drawing server that you configure. Connecting sends a status request and your access key to that server; it does not upload artwork. Uploading a copy is a separate, explicit action. The server operator controls retention and deletion of copies stored there. Ordinary Save remains local.

Disconnecting removes the app's saved server key, but does not delete files exported elsewhere or copies already sent to a server.

No tracking services

The installed app does not include advertising or analytics SDKs, and it does not automatically upload artwork or send anything in the background. The Android app can send a technical error report only when you choose Send, as described below.

Optional technical error reports in the Android app

When part of the Android app fails, such as saving, exporting or the drawing view, it can prepare a technical report. The app shows you the exact report before anything leaves your device. Only Send delivers it; Copy, Keep and Discard send nothing, and nothing is sent automatically.

What a report contains. The app version and build identity (its source revision and a fingerprint of the installed app), your Android version, whether the native app or its web view failed, a fixed error code, the operation (drawing, saving, exporting, reopening or reporting) and fixed internal code locations. It contains no artwork, prompts, file names, error messages, Google Drive data, keys, account details or device identifier, and it has no free-text field.

Where it goes. Send delivers the report over HTTPS to reports.binarybusiness.me, a report service that Binary Business operates for Drawcula on a server hosted by Hetzner Online GmbH in Germany. It handles reports only on our instructions. The service stores the report exactly as you saw it, with a receipt ID and the time it arrived. It does not log or store your IP address or browser details: the address is used only in memory to answer the connection and for short-lived rate limiting. An independent deletion record kept with Cloudflare holds only one-way hashes, never report content. We use reports only to diagnose and fix the failure, based on our legitimate interest in a reliable app and your choice to send.

How long it is kept. The service keeps a report for 14 days. Its encrypted backups expire within a further 14 days, so a report exists for at most 28 days. After sending, the app shows a receipt. Delete report removes the report from the service promptly, at the latest within 24 hours; backups expire on their own schedule and can never restore a deleted report. Forget receipt removes the receipt from your device only. You can also email the privacy address below with the receipt to ask for deletion. Receipt and deletion records, which contain no report content, are kept for 30 days, and error counts without any report content for up to 90 days. Reports you keep on the device without sending expire after 24 hours.

Optional Google Drive in the Android app

You can draw, save and export without Google. If you choose Connect Google Drive in the Android app, Google Play services on your device asks you to choose a Google account and approve access. Drawcula asks only for Google's drive.file permission, so it can reach files you open with Drawcula and files it saves to your Drive, not the rest of your Drive.

What the app uses. Your account's Drive permission ID, to keep each account's transfers apart on your device. For a file you open or save, its contents and its name, type, size, checksum and revision, so the transfer can be checked and resumed. The app contacts Drive only after you connect, to carry out and check the actions you choose. Ordinary Save stays on your device, and nothing syncs automatically.

Where it goes. Requests and file contents travel directly between your device and Google. We do not receive or store your Google account information, access tokens or Drive files, and we run no server for them. Google Play services keeps its own authorization on your device. Each time you send a paper to Drive, the app keeps a snapshot of it and a record of the transfer in its device storage, so an interrupted transfer can be resumed or the snapshot downloaded. These stay until you clear the app's data or uninstall it.

No other use. We do not sell Google user data, share it with anyone else, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models. Drawcula's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access. Disconnect in the app stops it using that account. To withdraw Drawcula's permission, remove it from your Google Account's third-party connections. Files saved to Drive stay there until you delete them in Drive. Google's own processing is described in the Google privacy policy.

Optional AI image generation in the Android app

AI image generation is optional, for adults aged 18 or older, and off until you set it up. Drawing, saving, exporting and Google Drive work without it. Setup asks only whether you are 18 or older; that choice is stored on your device, and no birth date or identity is collected. Where Google Play provides an age signal for your account, the app also checks it on your device and keeps AI off if Play reports a supervised account or an age under 18. That signal is not stored or sent anywhere.

Your key. You bring your own OpenRouter API key. The app stores it encrypted with Android Keystore on your device, never shows it again, and sends it only to OpenRouter to authorize your own requests. It is never sent to us and is not included in saves, exports or reports. Removing the key or withdrawing AI eligibility deletes it from your device; it does not revoke the key at OpenRouter.

What is sent, and where. When you choose to generate, the app sends your prompt and fixed generation settings (model, size and quality) directly from your device to OpenRouter over HTTPS, which routes the request to OpenAI. No artwork, reference image, account details or device identifier is sent, and no request passes through a Drawcula server, so we receive none of it. OpenRouter returns one image, which becomes a new layer in your drawing. OpenRouter and OpenAI process your prompt and the image under their own terms, privacy and retention policies, which we do not control: see OpenRouter's privacy policy and OpenAI's API data controls. Charges for your use are between you and OpenRouter.

What stays on your device. A generated layer keeps its prompt, model and generation settings with your drawing, so you can tell later what was generated. That record is saved in the paper on your device and in Drawcula files you save or copy, including Drive copies you choose to make. It is not included in PNG, JPEG, SVG, PSD or OpenRaster exports.

Reporting a generated image. You can report a generated layer from inside the app. If you choose Send, the report goes over HTTPS to reports.binarybusiness.me, a report service that Binary Business operates for Drawcula, with only the reason you chose, the AI provider and model, your Android version and the app surface, and the app's build identity. It never includes the prompt, the image or your key. The developer reviews these reports to improve the app's safeguards. Reports are kept for 14 days (at most 28 days including encrypted backups), and you can delete a sent report from its receipt.

AI image generation arrives in an upcoming Android update; the current release does not include it. This section describes how that update handles your data.

Your privacy rights

You may ask for access, correction, deletion, restriction, portability, or object to our use of your personal information where those rights apply. Write to the privacy address below; we normally respond within one month. You can complain to Datatilsynet or your local data protection authority. We cannot retrieve or delete artwork that exists only on your device or a separate service you control.

For privacy questions, contact privacy@drawcula.io.