Privacy Notice

Drama Square is the controller of the personal data described here. Contact us any time at dramasquare@proton.me.

• Account — email or phone number, a hashed password, and the timestamps of your consent to these terms.
• Profile — your handle, display name, bio, avatar image (stored in a private “profile” bucket), and any external social links you add.
• Subscription & billing — plan tier, Stripe customer and subscription IDs, current period dates. Card numbers are handled by Stripe and never touch our servers.
• Ad credits & sponsored drops — for Business users, a ledger of credit purchases and spends, and the geo, radius, and media of drops you place.
• Audit events — a record of sensitive actions (consent updates, sign-ins) with IP and user-agent, kept for security.

• Photos or videos you don’t share — captures live on your device.
• Face embeddings or biometric profiles.
• Advertising trackers or cross-site browsing history.
• Contacts or address book.

We process account, profile, and billing data to perform our contract with you. We process audit events and abuse-prevention signals on the basis of our legitimate interest in keeping the service secure. Where consent is required (for example, non-essential cookies in the EU), we ask for it explicitly.

• Supabase — auth, database, and storage host for the app.
• Stripe — payments, subscription, and ad-credit purchases.
• OAuth providers you choose (Google, Apple) — only the account identifier and email needed to sign you in.

We do not sell your personal data and we do not share it with advertisers or data brokers.

Our providers may process data outside your country of residence, including in the United States. Where required, transfers rely on the appropriate safeguards published by those providers (for example, EU Standard Contractual Clauses).

Account, profile, and subscription data are kept while your account is active. Ad-credit ledger and sponsored-drop history are kept for the life of your Business subscription plus up to 24 months for financial records. Audit events are kept for up to 12 months. When you delete your account, we wipe these records except where retention is required by law (for example, tax records held by Stripe).

You can access, correct, export, or delete your data from the profile page — “Export archive” downloads a JSON copy, “Delete my account” wipes it. Depending on where you live, you also have the right to restrict or object to processing, to withdraw consent, and to lodge a complaint with your local data-protection authority.

We use a small number of essential cookies and browser storage entries. See our Cookies notice for the full list. No advertising or analytics cookies are set.

Drama Square is not intended for children under 13 (or under 16 where local law sets that higher). Don’t create an account or provide any data if you are under that age.

We’ll surface material changes in-app before they take effect. Older versions are available on request.

Privacy questions, data requests, or complaints: dramasquare@proton.me.