Privacy policy.

Bakatako (“we,” “our,” “us”) is a social platform for doodles — a place to draw daily prompts, share works, remix each other, and follow people whose art you like. This Privacy Policy explains what we collect, why, and what you can do about it.

By using bakatako.com you agree to this policy. We try to keep it short and plain.

Things you give us

• Account — Email address and a password (or an OAuth identity from Google etc.).
• Profile — Username, avatar, bio, website, and the social links you choose to display.
• Drawings — The works, replies, comics, and other content you make on the platform — including the stroke-by-stroke drawing process, which powers drafts and timelapse replays.
• Reactions — Likes, follows, comments, and remixes.
• Payment — If you subscribe, billing is handled by Stripe — we never see your card number.

Things we collect automatically

• Usage — Which pages you visit, what you click, when you draw — used to fix bugs and decide what to build next.
• Device — IP address, browser, operating system, screen size.
• Cookies — Session cookies for authentication, preference cookies for things like sidebar collapse state, and analytics cookies from Google Analytics.

• Operate the service — show you the feed, save your drawings, deliver notifications.
• Moderate content and prevent abuse, spam, and IP infringement.
• Communicate — daily prompt emails (opt-in), service notices, replies to your support requests.
• Improve the product — fix bugs, prioritize features, understand which prompts land.
• Comply with legal obligations.

We don't sell your personal information. We don't serve third-party ads.

Works you publish are public by default — username, avatar, the drawing, and any reactions are visible to the internet. You can delete your works and replies at any time from the relevant page.

You retain all rights to what you draw. By posting, you grant us a license to display, distribute, and back up your content for the operation of the platform. We don't train machine-learning models on your drawings.

The editor records your drawing process (the sequence of strokes and edits) so drafts can be restored and timelapse replays can be rendered. When you publish a work, its timelapse may be publicly viewable alongside it.

We use third-party services to operate Bakatako — for example, hosting, storage, payments, email, analytics, spam prevention, and moderation. When these services are needed, the relevant account, content, or usage data may be sent to those providers under their own privacy policies.

Drawing and posting do not require buying a supporter membership.

You can link outside accounts to Bakatako. If you connect a social account (such as Discord, TikTok, Instagram, X, Bluesky, or YouTube), we store the account identifier and an access token so we can act on your behalf — for example, publishing a work to your own channels when you schedule a post, or syncing supporter roles on our Discord server. We only post where and when you tell us to, and you can disconnect a linked account at any time from your settings.

Our Discord bot processes Discord user IDs and in-server activity to run community features. If you link your Discord account, that activity is associated with your Bakatako account.

• Hosting — Vercel (US-based).
• Database & file storage — Supabase, with encryption in transit and at rest.
• Backups — Automated; retained for a limited window and pruned on a schedule.
• Access control — Role-based; engineering only touches user data when needed for support or debugging, and only with appropriate access.
• Retention — Your works and account data persist until you delete them or close your account.

No system is perfectly secure. If we discover a breach that affects your data, we'll notify you promptly.

• Service providers — Vercel (hosting), Supabase (database and storage), Cloudflare (multiplayer rooms), Stripe (payments), Resend (email), Google Analytics (usage analytics), and moderation or anti-abuse providers. Each handles only what it needs.
• Legal — When required by valid legal process, or to protect rights, safety, and platform integrity.
• Successor — If Bakatako is acquired or merged, your data transfers to the successor under this same policy or a comparable one.

You can:

• Access — See and edit your profile and works in the app.
• Export — Email us and we'll send a copy of your data.
• Correct — Update inaccurate info from your profile.
• Delete — Remove individual works, or delete your entire account from settings.
• Opt out — Unsubscribe from emails via the link in any email, or in your account settings.

EU/UK residents have rights under GDPR; California residents under CCPA. Email us to exercise them and we'll respond within 30 days.

Bakatako is intended for users 18 and older. We don't knowingly collect data from anyone under 18. If you believe a child has given us information, contact us and we'll delete it.

Our infrastructure is in the United States. By using Bakatako, you consent to your data being processed in the US, which may have different privacy protections than your home country.

We use cookies for sign-in, preferences, and basic security. We also use Google Analytics, which sets analytics cookies to help us understand how the site is used. We don't serve ads and don't use advertising cookies. You can clear or block cookies in your browser, but you'll be signed out and some preferences will reset.

We'll update this policy as the product evolves. Material changes get a heads-up via email or an in-app notice; continued use after the effective date means you accept the new version.

Privacy questions, data requests, or concerns: cody@bakatako.com.