Privacy

Last updated 18 September 2026

The short version: we store what the game needs to work, we don't sell it, and there's no advertising anywhere in the product.

Who runs this

Londy is operated by Londy, based in France. For data-protection purposes that makes us the data controller. You can reach us at contact@londy.app.

What we store

• Your email address — to sign you in, confirm your account and reset your password.
• Your display name — whatever you choose to be called. It's shown to your partner.
• A password hash — never the password itself.
• Your phone number, only if you enter one. It's optional and unused today.
• Your couple — who you're paired with, and your shared settings.
• Your game history — your guesses, drawings, AI verdicts, race results, times, reactions and streaks.
• Private messages — text you send to your paired partner, conversation mute/block preferences, and reports you submit. Messages are stored on Londy’s server and are not end-to-end encrypted. Support can review reported messages. Message text is not included in push notifications or sent to the drawing-rating AI.
• Your couple photo, if you upload one, is shared with your partner.
• Notification registrations and preferences — browser push subscriptions or Android device registration tokens, and your reminder time and time zone if you set a reminder.
• Server logs — IP address, browser and requested page, kept briefly for security and debugging.

Why we're allowed to store it

Almost all of it is necessary to provide the service you signed up for — the legal basis is performance of a contract. Server logs rest on our legitimate interest in keeping the service working and secure.

Who else sees it

Only the companies that help run the service, and only what they need:

• Microsoft Azure — hosts the database (EU region).
• Hetzner — hosts the application server (Germany).
• Resend — sends account emails.
• Cloudflare — DNS.
• Push delivery providers — deliver browser notifications. Android app notifications use Google Firebase Cloud Messaging, which processes device registration tokens and notification content; these are not end-to-end encrypted browser messages.
• Groq and Google Gemini — rate Doodle Duel drawings. We send the drawing prompt and submitted images to the selected provider; Gemini is used as a fallback. We do not include your account email or display name in the rating request, but anything you draw or write in an image is part of that image.
• Google Analytics — tells us which parts of the app get used.

We do not sell your data, share it with advertisers, or use it to build a profile of you.

Your partner

Pairing is deliberate sharing. Once you're paired, your partner sees your display name, your results, your reactions and your shared history. They never see your email address or anything from your account settings.

Cookies

A sign-in cookie so you stay logged in, and an anti-forgery cookie that protects forms. Both are strictly necessary — without them the app can't work. Google Analytics also sets its own cookies to count visits.

Your browser additionally stores a couple of small local preferences, such as whether you've seen the rules. Those never leave your device.

How long we keep it

Your account and game history stay until you delete your account. Deleting your account also removes conversations involving your account, their message reports and conversation preferences, including the other side of those conversations. Push subscriptions are removed automatically once a device stops accepting them. Server logs are short-lived.

Your rights

Under GDPR you can ask for a copy of your data, correct it, delete it, or object to how it's used. Two of those are self-service:

• Download your data — a machine-readable copy.
• Delete your account — instructions for the app, website or a request by email.

For anything else, email us. You also have the right to complain to a supervisory authority — in France that's the CNIL.

Children

Londy isn't intended for children. You need to be at least 15 to create an account.

Changes

If this page changes in a way that matters, we'll say so before it takes effect. The date at the top always reflects the current version.

← Back to Londy