Privacy

what the notebook keeps, who else sees it, and how to erase it
Last updated: 26 July 2026

Who is responsible

PAPERBRAWL is run by an independent developer based in France, who decides what is collected and why. Everything on this page goes to [email protected].

What we store

Your Doodle's name, which is public, plus its look, stats, gear and progress. Your email address, only if you save your account, or the account number your Google or Discord sign-in hands us. Your fights. Events tied to your account, used to see where players get stuck. Anonymous feedback, and a separate email if you join the waitlist. Your IP address is used to limit abuse and to guess which language to show you. Also the name of the site that sent you to us, such as reddit.com, never the full address.

Why we are allowed to

We keep what the game needs in order to run, and to stay free of cheating and abuse. Your email is kept because you asked us to save your account, and you can take that back at any time. Statistics tied to your account tell us whether the game is understandable, and they are deleted when you delete your account.

Who else receives it

Only the services that make the game run: Resend sends the sign-in emails, OpenAI checks new Doodle names for insults, Cloudflare carries the traffic, Hostinger hosts the servers in Europe, and Google runs the advertising. Alerts sent to the developer's own Discord carry masked data. Nothing is ever sold, and nothing goes to anyone else.

Ads

Google AdSense loads on every page while the site is under review, so Google sees your IP address and can set its own cookies. No ad is displayed yet, and the rewarded ads you would choose to watch for extra fights are not live. Personalised advertising will not be switched on in Europe without asking you first.

Cookies

Your sign-in and your settings live in your browser's own storage, not in advertising cookies, and never leave your device unless you ask for them. The game sets exactly one cookie, during a Google or Discord sign-in and for ten minutes, to check that the browser finishing the sign-in is the one that started it. Google may set its own.

How long we keep it

Your account and your Doodle stay for as long as the account does. Fights are deleted after 30 days, and only the counts survive. A sign-in expires after 90 days without use. Statistics tied to your account are kept until you delete your account.

Delete your data

Settings has a delete button. It erases your account, your email and your sign-ins straight away, and retires your Doodle: it leaves the rankings, stops carrying anything that names you, and its name is freed for someone else. Fights you took part in stay in your opponents' history, because deleting those would erase somebody else's game too.

Your rights

You can ask what we hold about you, have it corrected, have it erased, get a copy of it, or object to it being used. Write to [email protected] and you get an answer within a month. If the answer does not satisfy you, you can complain to your national data protection authority, which is the CNIL in France.

Contact

Privacy questions: [email protected]

Terms of Use back to the game