Privacy

Last updated November 4, 2026.

Your creations and saved works

Drawing, sound synthesis and audio analysis run in your browser. Imported audio recordings are not sent to our server. Local downloads need no account and do not upload your work. Drawing drafts can be stored in this browser for recovery; they are not a cloud backup. Saving to your account or creating a share link requires you to sign in. When you save a work, its drawing, notes, settings, title and any card message are stored as project data in our Cloudflare-hosted database and associated with your account. We do not generate or store a finished audio recording for saved works; playback is produced in the browser.

Sharing and deletion

Saved works are visible to their owner until a share link is created. Anyone with that link can view, play and remix the shared work without signing in. A link is unlisted, but it is not a private access restriction. Selecting Publish in gallery, where available, also lists the work in the public community gallery. Avoid including personal information in titles or card messages.

Your saved works and share links remain available after a subscription expires. You can delete a work from your account; deletion also disables its share link. It cannot recall copies a recipient has already made. We retain save-count records to enforce the one-time free save and annual allowance; deleting a work does not restore that allowance. Cloudflare may process connection information to deliver and protect the service, and request limits use a daily hash of your IP address to limit abuse.

Analytics

Cloudflare Web Analytics counts page views without cookies or local storage. We also use Google Analytics with Google Consent Mode, with advertising signals always off. In the EU, EEA, United Kingdom and Switzerland, analytics cookies are set only after you choose Allow; until then Google receives cookieless signals without cookie identifiers. In other regions analytics cookies are on by default and you can turn them off with Cookie settings in the footer. We measure page views and actions such as playing, sharing, and exporting, without sending drawing contents, recordings, or filenames. We also measure which search or referral channel brought a visit, using fixed campaign labels rather than full URL queries or private share IDs. Turning analytics off does not affect the tools. With analytics cookies allowed, a temporary flag in this tab's session storage lets us measure whether a download is followed by sign-in, saving or sharing. It contains no drawing or account details.

Google sign-in and your account

When you choose Google sign-in, Google shares your account identifier, name and verified email address. We store these to identify your DrawMusic account and associate it with saved works and your subscription. We do not request access to Gmail, Google Drive, or your Google password. Google Identity Services loads when you choose to sign in on the account page or before saving or sharing; it is separate from optional Google Analytics.

A necessary, secure HTTP-only cookie keeps you signed in for up to 30 days. Only a hash of the session token is stored in our database. You can sign out on this device or all devices from your account page. Short-lived login challenges are used to prevent replay. Signing in alone does not upload your drawing or audio recordings. Saving or sharing sends the project data described above.

Payments

When available, Waffo handles checkout and payment details. Your account email pre-fills checkout. We store the account-to-order association, plan, subscription status and access period to calculate your save allowance when you sign in on another device. We do not store card numbers. Waffo's verified notifications update subscription access. The billing email on your receipt may differ if you change it at checkout.

Older browser-based purchases can be restored with a private recovery code and explicitly linked to a Google account. Linking invalidates the old code. Account and payment records are retained while needed to provide the service, resolve billing issues, or meet applicable obligations. Contact hi@drawmusic.app to request account deletion; deletion does not itself cancel a Waffo subscription.

Support requests

The support form sends your email address and message to our Cloudflare-hosted support queue so the operator can review your request. Requests are removed after 90 days. Do not include card numbers, passwords or private recovery codes.

Requests

For privacy, account deletion, or shared drawing removal requests, use our support form or email hi@drawmusic.app. Include the share URL if relevant, never payment card details.