This is the reading-only version. Enable JavaScript to draw, view regional prices, select products and place an order.
Privacy policy
This policy explains how WE DREW IT collects, uses, shares and retains personal information and Service usage information.
Updated · 2026-10-12
Article 1 — Basic principles
WE DREW IT obtains and manages information appropriately, within the scope necessary to achieve the stated purposes, in accordance with applicable data-protection laws and this policy.
Article 2 — Information collected
When collaborative drawing features are used, we may collect room and participant identifiers, names entered by participants, artwork data, connection status and operation records. When an order is placed, we collect the customer’s name, email address, delivery address, telephone number, order details, payment status and delivery information. Stripe processes card numbers directly; they are not stored on WE DREW IT servers.
Article 3 — Purposes of use
Information is used to provide artwork synchronisation, recovery, storage, export, replay and sharing; confirm and fulfil orders; manufacture and deliver products; handle enquiries, refunds and support; prevent fraud and misuse; maintain security; investigate failures; and improve the Service. Personal information is not used beyond these purposes without consent or another lawful basis.
Article 4 — Service providers and third-party disclosure
Cloudflare is used for site operation, storage, real-time connections and operational analytics, and Stripe is used for payment processing. Order specifications and delivery information are provided to manufacturing and delivery providers only to the extent necessary to fulfil an order. Personal information is not otherwise disclosed to third parties except with consent, where necessary to perform a contract, or as permitted by law. Information may be processed outside Japan.
Article 5 — Retention
Standard anonymous rooms expire 7 days after the last activity and no later than 30 days after creation. Artwork saved to an account remains available in the personal space until the user deletes the account. Guest order tracking remains available for 30 days after payment. Order, delivery, refund and accounting records are retained for periods required by law or necessary business operations, and are then deleted or anonymised by reasonable means.
Article 6 — Security
Reasonable safeguards appropriate to the nature of the information and scale of the Service are applied, including access controls, protection of data in transit, permission management and measures against unauthorised access. Users must also protect invitation links and recovery information because they may function as access credentials.
Article 7 — Access, correction and deletion
Signed-in users may delete their account from the account page. Other requests to access, correct, restrict or delete personal information may be sent to support@wedrewit.com. Identity verification may be required for security. Paid-order records required by law or needed to fulfil orders and resolve disputes may be retained for the necessary period after account deletion.
Article 8 — Changes to this policy
This policy may be amended in response to changes in the Service or applicable law. The amended policy will be published on the site and will apply from the effective date shown on the page.
Homepage experience diagnostics
We also measure the first foreground viewing period on the homepage: visible and idle-adjusted time, scroll depth, visibility of start buttons, click counts and the page section visible when the page is hidden or left. Our dashboard aggregates dates, country and campaign categories without identities or page content; when PostHog analytics is enabled, these measurements also link to the current analytics session. A hidden page does not necessarily mean abandonment. Session replay remains off; artwork, inputs and individual keystrokes are not recorded.
Website journey statistics
Our own dashboard also uses existing separate visitor, room and participant pseudonyms to measure ordered steps from creation and drawing through invitations, completion, product selection and checkout. Payment outcomes are server-verified; checkout pseudonyms deduplicate repeated notifications. These linkable journey records differ from the identifier-free category counts below and are not fully anonymous. Cloudflare processes them; they are not sent to PostHog and exclude artwork, addresses, payment-card details and order contents. The PostHog allow or close choice does not control these website journey statistics.
Additional website dashboard counts
The website counts page visits, entry clicks, trial drawing, creation, shared-link arrivals, login outcomes, completion, exports and purchase intent by action and traffic category by default. Cloudflare processes these counts independently of your PostHog allow or close choice; they are not sent to PostHog. These additional counts retain no visitor, account, room or event identifiers, names, emails, artwork, full URLs or request IP addresses. They do not use cookies or browser storage to link visitors; entry context is held only in the current page memory. We also count initial PostHog allow or close choices separately from later changes. Reports aggregate dates and categories, not unique people. DNT or GPC signals disable these additional counts. Necessary service-operation records described elsewhere continue independently.
Optional website analytics (PostHog)
We use PostHog to understand traffic sources and the creative journey. When our default-collection test setting is enabled, limited behavior events are sent on arrival; this is recorded as default collection, not affirmative consent. Browsers with an earlier opt-out remain excluded. Turn analytics off through Analytics preferences in the footer without affecting drawing, invitations or purchases. Otherwise analytics requires Allow. We do not backfill activity while tracking was off. Meta and TikTok ad measurement has a separate setting. When default ad measurement is enabled, limited advertising events are also sent; see below for details and opt-out controls.
Analytics data and storage location
Events cover page categories, times, homepage entry clicks, trial drawing, creation, invitation arrivals, collaborative drawing, completion, exports, shared-link visits, sharing attempts, login methods and success or failure, purchase intent, product selection, checkout starts and errors, cancelled returns and server-confirmed payment outcomes, with language, play mode, traffic source, campaign, country category, operating system, browser category and limited error/action categories. PostHog provides event storage in its EU region (Frankfurt, Germany), outside Japan. We do not send names, email or street addresses, payment-card data or order contents, artwork, form input, full URLs, private access credentials or visitor IP addresses. Session replay, advertising remarketing and cross-site tracking are off for this PostHog integration; Meta and TikTok are described below. Account content, order tracking and administration pages are excluded. On the payment return page, only server-confirmed status and a checkout pseudonym are recorded while analytics is currently enabled. Login interfaces record only action categories and authentication outcomes, without input content or account identity.
Browser identifiers, choices and withdrawal
Default collection uses a random identifier limited to the current tab session. After Allow, a separate browser identifier recognizes return visits without linking accounts. Sessions renew after 30 minutes of inactivity or changed campaign attribution. Room, participant and checkout identifiers are pseudonymized on the server; original order IDs are not sent. These records can link actions and are not fully anonymous. Allow lasts 150 days. Opt-out lasts 7 days in consent mode; default mode continues to honor a stored opt-out until you choose Allow. Analytics preferences in the footer stops new events and removes local analytics identifiers, but does not delete previously sent data. DNT and GPC signals disable collection.
Analytics retention and requests
We use the PostHog Free plan with a one-year event retention period. Expired data is handled by the provider’s cleanup process; we do not promise physical deletion at an exact moment. Analytics is limited to the service-improvement purposes above. To request access or deletion, contact support@wedrewit.com. Because analytics is not linked to your name, email or account, we may need your help to locate this browser’s records; records may be unidentifiable after the identifier is cleared. Do not send passwords, verification codes or private room links. These optional preferences control PostHog and the ad measurement described below, not Cloudflare features used to provide the service, security and operational statistics.
Optional ad measurement (Meta and TikTok)
The same Allow choice covers the PostHog analytics described above and, when configured and enabled, ad measurement events sent to Meta (Facebook and Instagram) and TikTok to measure and optimize advertising. When the separate default ad-measurement setting is enabled, visitors who have not opted out send limited events from their current visit without another Allow action. Default collection is not recorded as affirmative consent, and an earlier acceptance alone does not authorize added purposes. Stored opt-outs remain effective and old events are not backfilled. Closing the notice or withdrawing through Analytics preferences stops both optional integrations without affecting website use. Our Cloudflare server sends allowlisted browsing, creation, invitation, completion, product, and server-verified checkout and payment events. Live conversions may include the amount and currency. Data includes page categories, a base website address without private paths or parameters, event times, source categories, separate pseudonyms and deduplication IDs. When ad measurement is enabled, we read Meta/TikTok click IDs from landing links to match ad interactions. Default mode stores them only within the current tab analytics session; after Allow, local storage lasts up to 30 days. Expiry, opt-out or renewed consent clears them. DNT and GPC signals stop sending. Each platform receives its own pseudonyms. We do not send account identities, names, emails, addresses, artwork, form inputs, original order numbers, payment sessions, room credentials, full referrer URLs or visitor IPs, or load Pixel scripts or session replay on business pages. Click IDs may let the platforms associate events with their users or ad interactions, so these records are not fully anonymous. Meta and TikTok process and retain data under their respective terms; the PostHog EU-region and one-year retention statements above do not apply to them, and processing is not guaranteed to remain in the EU. Withdrawal does not automatically erase previously sent data. Contact support@wedrewit.com with requests.
New device sign-in alerts
After a successful sign-in, we store a random security marker in your browser to recognize previously used browsers and reduce repeated sign-in alerts. It is not used for advertising or analytics and cannot replace sign-in. The browser marker lasts up to 180 days and is refreshed at sign-in. On the server, we retain an account-linked digest and recognition records, including expiry, for up to 20 browsers per account. Clearing browser data, using a private window or changing browsers may trigger a new device alert. Signing out all devices or deleting the account clears the corresponding server records.
Delivery details when returning from payment
When you proceed to payment, we temporarily save recipient names, phone numbers, delivery addresses and item groups in this tab’s session storage so you can continue after cancelling payment. The draft can be restored for two hours. It contains no card details and is not used for advertising or analytics. We clear it after the server confirms payment, or on the next read after expiry. You can also clear browser data. Browsers normally clear session storage when a tab closes, but restoring a tab may restore this data.
Order support information
We retain order enquiries, topics, preferred resolutions, photos and replies to provide support. Photos are available only through authorized order access, are not public artwork, and are not shared with factories by default. Expiry of a private viewing link does not delete support records; retention follows this policy.