Short version: Cray Cray Party (including Scribblings) has no accounts, no ads, no tracking, and we do not collect personal information from anyone, including children. Last updated October 11, 2026.
Your creatures, drawings, progress, stars, stickers and streak are saved only in your browser (local storage). A small anonymous play log (like "finished course 3") also stays on your device to help the game feel right. It is never sent to us. Clearing your browser data erases all of it.
Only if you tap "Can your doodle beat mine?", we store that one creature so your friend can race it: the crayon lines (as numbers), its color, its generated name and personality (picked from fixed word lists, as numbers), the course, your time, and the path your creature hopped. Nothing typed, no names, no photos, no device IDs. It gets a random, unguessable link. There is no public gallery or search, so only people you send the link to can see it. To delete a shared creature, email us the link.
When a creature hatches, the game asks our server how many players have found that kind of creature (for example "Water Leggy"). Only the kind is sent, which is a short code like "leggy-l2-e4". It is counted anonymously.
Names and personalities come from a built-in kid-safe generator. If AI naming is switched on, our server sends only the creature's kind (shape, number of legs, element) to an AI service to suggest a name. Your drawing and anything about you are never sent. Every AI answer goes through a strict safety filter, and anything unusual is replaced by the built-in generator.
When someone hosts a party, we create a room with a random 4-letter code. Players join with a nickname and a doodle face they pick; nicknames are filtered for family-safe words and we ask people not to use real full names. Room messages (drawings, hops, answers, votes, reactions) travel through our realtime service (Supabase) only while the room is open and are not saved. The room record itself holds only the code, a secret for the host screen, player and audience counts, and timestamps, and is deleted after 30 quiet minutes. In streamer mode, typed nicknames are hidden and everyone gets a generated name.
To rank games and (later) pay game creators fairly, we record anonymous play sessions: which game, the room code, start and end time, how many players and viewers, and whether it finished. Players can rate a game 1 to 5 stars; we store the star count with a one-way hash, never a name. None of this identifies a person.
Games made by other creators run in a locked-down sandbox: they cannot see your device storage, cookies, or anything outside the game, and they cannot connect to the internet. They only receive the game moves the room sends them.
Cray Cray Party Pro (a subscription for hosts) and the tip jar are paid on Stripe's secure checkout page, so we never see card details. If you use "Restore Pro", the email you type is sent to Stripe only to look up a past Pro purchase. We do not store it. Your Pro pass is a signed code that contains no personal information.
The game is hosted on Vercel and shared creatures are stored with Supabase. Like any website, these services briefly process IP addresses to deliver pages and stop abuse (for example rate limits). We do not use them to identify or profile anyone.
Cray Cray Party is made for all ages, including kids under 13. We designed it to follow the US Children's Online Privacy Protection Act (COPPA): no accounts, no personal information, no chat, no ads, no audio or camera access, no third-party trackers, and no player-written text shown to others.
Questions or deletion requests: rocket@mail.grokbot.com