Privacy Policy

1. Who we are

DrawnCamera is developed and operated by Nikolay Kovalskiy aka AppoMobi, an independent developer ("we", "us"). Contact: [email protected], or the feedback form in the app's Settings window.

2. Your video stays on your PC

Everything the camera does happens on your machine. The webcam feed is processed locally on your GPU and published as a virtual camera that you then pick inside Zoom, Teams, Meet, Discord or whatever else you use. We do not upload, receive, view, record or store your video, your audio or any still image. There is no cloud, and the app has nowhere to send a frame even if it wanted to.

Custom backgrounds and images you add stay in the app's folder on your disk.

3. Your account

An account exists so that premium features can follow you rather than a machine. It is created when you sign in, and the identity is your email address — nothing else.

• Email sign-in. You type your address, we email you a one-time code, you type it back. The pending code is stored hashed, expires quickly, and is discarded after use.
• Google sign-in (where offered). The app opens your normal browser, and we ask Google for exactly two things: that you are signed in, and your email address. We do not request your profile, so Google never sends us your name, your given or family name, or your profile picture — they are not in what we receive at all. We never see your Google password, and we keep no ongoing access to your Google account: after sign-in there is nothing of Google's left on our side. Google sign-in is not offered in every country for legal reasons; the email code always works everywhere.

4. What the server stores

All of it lives in one database at Cloudflare. Honestly and completely:

• Your email address — the account key.
• Entitlement bookkeeping — free or premium, when premium ends, when the account was created, when the app last checked in, how many times the installer was downloaded on this account and when.
• Sign-in sessions — for each device you signed in on: a hash of the session token (never the token itself), a random identifier generated by that installation, the device name Windows reports so you can tell your machines apart, and the created / last-seen timestamps. That random identifier is not tied to your hardware and is regenerated by a fresh install.
• One free month per PC — besides the random per-install identifier above, the app sends a one-way hash that stands for this computer, used only so that one computer gets one free month rather than one per Windows user account. It cannot be reversed into anything that identifies your machine, nothing that identifies you is attached to it, and it is used for nothing else. What is kept against it is when the free month started and when it was last seen.
• Pending sign-in codes, hashed, with an expiry and an attempt counter.
• Promo codes you redeem, with the email that redeemed them.
• Short-lived rate-limit counters, keyed by email address or IP address, so nobody can hammer the sign-in or crash-report endpoints. They expire on their own.
• Feedback you send from the Settings window: your message, a snapshot of the camera settings you had at that moment, the app version, and your email if you were signed in. You choose when to send this; nothing is collected in the background.
• Crash reports, only when you send one. If the app crashes, it writes a report on your PC. At the next start it asks whether to send it and lets you read it first; nothing leaves your PC unless you choose to send. A report holds the app version, the Windows version, the display scale, the name of the selected webcam, the graphics card and its driver, the versions of the libraries the app runs on, the error and where in the app it happened, how long the app had been running, which windows were open, the background and filter in use, whether the app was on the free plan or premium, and how many days it has been in use. It carries no email address, no account and no device identifier, and a Windows user name that can appear in a file path is removed on the server before the report is stored.
• Download counts — how many times each version was downloaded and through which link (this website's button, its promo form, or the app's updater), with no identifier attached. If a link with a short source tag brought you to this website (for example from a post or a video), that tag is counted with the download. Your browser keeps the tag only for that tab (session storage, not a cookie).

That list is the whole of it. There is no usage tracking, no feature telemetry, no crash reporting in the background (a crash report leaves your PC only when you send it) and no advertising identifiers. Nothing here is used to build a profile of you or to follow you anywhere — the one value that stands for a machine is the free-month hash above, and counting one free month is all it does.

5. Our commitment about names

We never ask for your name and we never store one. An email address on its own is a way to reach an account; it becomes personal information about a person when it is tied to a real identity, and tying it to one is exactly what we do not do — not as a feature, not as an enrichment, not as a convenience. This is the reason the Google sign-in above asks for so little: the name and picture Google would happily hand over are never requested, so there is nothing to discard and nothing to leak.

6. Who else is involved

• Cloudflare hosts this website, the activation service and its database, and delivers the sign-in emails from [email protected]. As with any web host, its edge keeps standard request logs (including IP addresses) for a short period for security and abuse prevention.
• Our download server serves the installer and keeps ordinary web-server logs (IP address, time, file requested).
• Google, only if you personally choose Google sign-in, and only to the extent described in section 3. Their handling of your Google account is governed by Google's privacy policy.

We use no analytics provider, no advertising network, and no data broker. We do not sell or share personal data — there is no market for what little we hold, and we would not be in it.

7. Payments

We never see your card. Payment is handled by the payment provider shown at checkout, and what reaches us is only that an account is subscribed and until when. We hold no card number, no bank detail and no billing address. Promo codes involve no payment at all.

8. Keeping it, and deleting it

Account data is kept while the account exists. Sign-in codes expire in minutes; rate-limit counters expire in hours; session records disappear when you sign out or revoke a device. Crash reports and download counts carry no identifier, so they cannot be traced back to you or your email address. The free-month marker is kept for as long as it has to be to mean anything — it belongs to a computer, not to an account, so deleting an account does not remove it and it is not reachable from your email address.

To delete your account and everything attached to it — the account row, every session, the feedback you sent — write to [email protected] from the address in question and it will be done. Uninstalling the app removes its local data from your PC, including the stored licence, but does not by itself delete the account on the server.

9. Children

DrawnCamera is not directed at children and we do not knowingly collect information from them.

10. Your rights

Depending on where you live — under the GDPR, for example — you may have the right to access, correct, export or erase your personal data, and to object to its processing. Since the only identifier we hold is your email address, most requests come down to the deletion above, but write to us and we will help.

11. Changes

If this policy changes, the new version appears on this page with a new effective date, and anything material is noted in the app's release notes.