Privacy policy.

Bakatako (“we,” “our,” “us”) is a social platform for doodles — a place to draw daily prompts, share works, remix each other, and follow people whose art you like. This Privacy Policy explains what we collect, why, and what you can do about it.

By using bakatako.com you agree to this policy. We try to keep it short and plain.

Things you give us

• Account — Email address and a password (or an OAuth identity from Google etc.).
• Profile — Username, avatar, bio, website, and the social links you choose to display.
• Drawings — The works, replies, comics, and other content you make on the platform.
• Reactions — Likes, follows, comments, and remixes.
• Payment — If you subscribe, billing is handled by Stripe — we never see your card number.

Things we collect automatically

• Usage — Which pages you visit, what you click, when you draw — used to fix bugs and decide what to build next.
• Device — IP address, browser, operating system, screen size.
• Cookies — Session cookies for authentication, preference cookies for things like sidebar collapse state.

• Operate the service — show you the feed, save your drawings, deliver notifications.
• Moderate content and prevent abuse, spam, and IP infringement.
• Communicate — daily prompt emails (opt-in), service notices, replies to your support requests.
• Improve the product — fix bugs, prioritize features, understand which prompts land.
• Comply with legal obligations.

We don't sell your personal information. We don't serve third-party ads.

Works you publish are public by default — username, avatar, the drawing, and any reactions are visible to the internet. You can delete your works and replies at any time from the relevant page.

You retain all rights to what you draw. By posting, you grant us a license to display, distribute, and back up your content for the operation of the platform. We don't train machine-learning models on your drawings.

Some features use third-party AI services — for example, content moderation, prompt generation, character generation, and (legacy) screenshot-to-video tooling. When you use one of these features, the relevant inputs may be sent to providers including OpenAI, Anthropic, and Replicate. These providers process the data under their own privacy policies and (per their public policies) do not use API inputs to train their models.

You can choose not to use AI features. Drawing and posting do not require them.

• Hosting — Vercel (US-based).
• Database & file storage — Supabase, with encryption in transit and at rest.
• Backups — Automated; retained for a limited window and pruned on a schedule.
• Access control — Role-based; engineering only touches user data when needed for support or debugging, and only with appropriate access.
• Retention — Your works and account data persist until you delete them or close your account.

No system is perfectly secure. If we discover a breach that affects your data, we'll notify you promptly.

• Service providers — Vercel (hosting), Supabase (storage), Stripe (payments), Resend (email), Sentry (error tracking), and the AI providers listed above. Each handles only what it needs.
• Legal — When required by valid legal process, or to protect rights, safety, and platform integrity.
• Successor — If Bakatako is acquired or merged, your data transfers to the successor under this same policy or a comparable one.

You can:

• Access — See and edit your profile and works in the app.
• Export — Email us and we'll send a copy of your data.
• Correct — Update inaccurate info from your profile.
• Delete — Remove individual works, or delete your entire account from settings.
• Opt out — Unsubscribe from emails via the link in any email, or in your account settings.

EU/UK residents have rights under GDPR; California residents under CCPA. Email us to exercise them and we'll respond within 30 days.

Bakatako is intended for users 18 and older. We don't knowingly collect data from anyone under 18. If you believe a child has given us information, contact us and we'll delete it.

Our infrastructure is in the United States. By using Bakatako, you consent to your data being processed in the US, which may have different privacy protections than your home country.

We use cookies for sign-in, preferences, and basic security. We don't use third-party advertising or cross-site tracking cookies. You can clear cookies in your browser, but you'll be signed out and some preferences will reset.

We'll update this policy as the product evolves. Material changes get a heads-up via email or an in-app notice; continued use after the effective date means you accept the new version.

Privacy questions, data requests, or concerns: cody@bakatako.com.