Who we are
Our website address is: https://www.ohmydots.com/.
If you require any more information or have any questions about our privacy policy, please feel free to contact us.
Pictures you upload
Where they are processed. Cropping, background removal, local line-drawing styles and detecting whether a picture is a photo run entirely in your browser; the picture is not sent to us. When you create a game, the picture, and its derivatives (e.g.: preview and hint image) are stored on our servers. Anyone who has the game’s link can see them. We don’t publish any user generated games in our public gallery without the user’s consent. Do not upload pictures you want to keep private, and avoid pictures with embedded location data (EXIF GPS).
Moderation. To keep the Site safe and lawful, every picture you upload is checked automatically for prohibited content by Amazon Rekognition (Amazon Web Services EMEA SARL, processing in the United States). Pictures that fail the check are rejected. Contact us if you believe a picture was rejected by mistake.
Online line art. If you choose the “Online” style, a reduced copy of your picture (max. 512×512 px) is converted to a line drawing using Cloudflare Workers AI (Cloudflare, Inc.). Cloudflare processes the picture only to perform the conversion, does not keep it and does not use it to train models.
Developing and training our features. We may use pictures from existing games to develop, test and train our features and models, such as photo detection and line drawing. Training is done privately by us. For each training run we make a temporary copy of the pictures needed, use it only for that training and delete it afterwards. Pictures are never published or shared with third parties. Before use we remove metadata such as EXIF/GPS and leave out pictures showing recognisable people.
Retention. Pictures are kept for as long as their game exists. Games that have not been played or opened for 180 days are taken offline and deleted automatically after 366 days. When a game is deleted, by you or automatically, its picture, preview and hint images are deleted and are not included in any later training. Trained models keep only learned parameters and never contain your pictures.
Your right to object. You can object to the use of your pictures for training at any time, without giving reasons, via our contact form. We will then leave your pictures out of future training. Deleting your game has the same effect.
Cookies and local storage
Our own storage. We store a few items in your browser’s local storage that the Site needs to work: your guest or user identifier and session (so you can manage your games and keep your scores), your privacy choices and country, your settings, and which games you have played. This data stays in your browser and is not used for tracking or advertising.
Statistics. We use Matomo, a statistics tool hosted on our own server, to count visits and understand how the Site is used. IP addresses are anonymised. It uses cookies to track how often users come back to our site. This data is used solely to improve our website and it is not shared with anyone.
Advertising. Ads are served by Google AdSense (Google Ireland Limited). Google and its partners may use cookies and similar technologies to show and measure ads, including personalised ads. Where your consent is required, for example in the EU/EEA, the UK and Switzerland, Google’s consent dialog asks for it before such cookies are used. You can change or withdraw your choice at any time via “Privacy and cookie settings”. More information: https://policies.google.com/technologies/partner-sites
Bot protection. Our network provider Cloudflare may set a security cookie (cf_clearance) to protect the Site against bots and attacks. It is strictly necessary and is not used for tracking.
Accounts and comments
When you sign in or leave a comment, we collect the data in the form, your IP address and your browser user agent, to authenticate you and to detect spam.
Country detection
We infer your country from your IP address only to know which privacy rules apply to you. We do not determine your precise location.
Legal bases
We process personal data to provide the service you request, such as creating, storing and showing your games (Art. 6(1)(b) GDPR; Art. 7 V LGPD). We rely on our legitimate interests to keep the Site safe (moderation, spam detection), to operate it and to improve it, including training our features (Art. 6(1)(f) GDPR; Art. 7 IX LGPD). We use your consent for advertising cookies and personalised ads (Art. 6(1)(a) GDPR; Art. 7 I LGPD), collected through Google’s consent dialog. Local storage the Site needs to work and cookieless statistics are based on our legitimate interests (Art. 6(1)(f) GDPR).
Who we share your data with
We use these providers, who process data on our behalf and under data processing agreements:
- Dreamhost: hosting of the Site and our servers, in the United States;
- Cloudflare, Inc.: network, security and content delivery, and online line-art conversion;
- Amazon Web Services: automatic moderation of uploaded pictures, in the United States;
- Functional Software, Inc. (Sentry): error reports, which contain technical data such as browser, page and error details, in the United States.
These providers do not use your data for their own purposes; where a provider offers such use, we have opted out.
Google Ireland Limited serves the ads on the Site. For advertising, Google acts as an independent controller and processes data under its own privacy policy (https://policies.google.com/privacy), subject to your consent where required (see Cookies and local storage).
Transfers outside the EU
The Site is hosted in the United States, so pictures you upload and other data we process are transferred to the US. Our providers also process data in the US or elsewhere outside the EU/EEA. These transfers are covered by the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
Your rights
You have the right to access, correct, delete, restrict and receive a copy of your personal data, and to object to processing based on our legitimate interests. You can withdraw consent at any time. Contact us via our contact form. You also have the right to complain to a data protection authority, in the EU usually the one where you live, and in Brazil the ANPD. We may keep data we are legally obliged to retain.
Children
The Site is used by families and schools, and pictures may show children. Parents, guardians and teachers should only upload pictures they are allowed to share and should avoid pictures in which children can be identified. We do not knowingly collect personal data from children. If you believe we hold a child’s personal data, contact us and we will delete it promptly.
Changes
We will post any changes to this policy here.
This Privacy Policy was last updated on October, 26 2026.