CanvasDrop

Privacy & data deletion

Last updated August 5, 2026

CanvasDrop is a shared drawing canvas. This page says what it stores, what it cannot read, and how to delete everything.

Your drawings are end-to-end encrypted

A drawing is encrypted on your device before it is uploaded, and can only be opened by the devices you sent it to. We cannot see your drawings. No key that opens one is ever sent to our servers, and there is no mechanism by which we could read one on request.

Encrypted drawings are deleted from our servers as soon as every recipient has collected them, and automatically after 7 days if someone never does.

What we store

Your account: the username you choose, an optional display name and photo, and the Google or Apple account you sign in with.
Your connections: who your friends are and which groups you are in.
Your devices: a public key per device (used to encrypt drawings to you), a notification token, and the device name and model, so you can recognize them in Settings.
Delivery records: who sent to whom and when, until the drawing is collected. Not the drawing itself, which we cannot read.

We do not sell data, and we do not use your drawings for anything. Crash reports and basic usage events are collected through Google Firebase to keep the app working.

CanvasDrop shows a banner ad, served by Google AdMob. Ads are the only thing that pays for the app, and you can remove them permanently with a one-time purchase in Settings.

Your drawings are never used to target ads and are never shared with AdMob. We cannot read them, so we could not share them if we wanted to. To serve an ad, Google receives your device's advertising identifier, IP address, and coarse information about the device and the app, and may use it to measure and personalize advertising. What Google does with it is described in Google's advertising privacy notice.

In the EEA, the UK, and Switzerland you are asked for consent before any of this happens, through Google's consent form. If you decline, ads still appear but are not personalized. You can change your answer at any time in Settings → Ad privacy options. Elsewhere, ads may be personalized by default and you can still remove them by purchasing ad removal.

Purchases are handled by Google Play. We receive confirmation that a purchase was made and tie it to your account so ad removal follows you between devices; we never see your payment details.

Deleting your account

In the app: Settings → Delete my account. This removes your account, username, friendships, device keys and anything still in transit, immediately and permanently.

If you cannot access the app, because the phone is lost or the app is uninstalled, email lololdeveloper@gmail.com from the address on your Google or Apple sign-in, and we will delete it for you within 30 days.

Deletion is not reversible. Your friends lose the canvas they shared with you, and your username becomes available to someone else. Drawings already delivered to someone else's device stay on that device, because they are theirs and we cannot reach them.

Children

CanvasDrop is not intended for children under 13, and we do not knowingly collect their data.

Contact

Questions, or a privacy or security concern: lololdeveloper@gmail.com.