Kei GamesPrivacy Policy
Last updated: October 12, 2026
This policy explains what information Kei Games ("we") handles in our games (Doodle Theater / らくがき劇場, Puru Spa!, Capsule Dungeon, our silly mini games and others) and on the pages we publish on keigamesstudio.com and dezapatto.com, and how. It also applies to the app versions (Android and iOS) and the Steam versions. If this English version and the Japanese version differ, the Japanese version prevails.
- What we do not collect
- Data stored only on your device
- Playing Doodle Theater online
- When someone is reported
- Analytics (Google Analytics)
- Server access logs
- App, Steam and game-portal versions
- Third-party services and sharing
- Children
- Deleting your data
- Contact and changes
1. What we do not collect
We do not collect information that identifies you, such as your name, email address, phone number, address, precise location, contacts or photos. There are no accounts or logins (unless you email us; see 11).
2. Data stored only on your device
Game progress and settings (coins in Puru Spa!, progress in Capsule Dungeon, sound and narration settings, etc.) are stored only on your device (browser storage) and are not sent to our servers. Clearing your browser's site data deletes them.
Doodle Theater stores the following on your device:
- A device key: a random 24-character string created the first time you open the game. It is not linked to your name or device information. It lets the server tell that likes and reports come from the same device (3).
- Your player name and settings (narration mode, story length)
- Your block list (the other player's public ID, name and the time you blocked them; up to 200)
- Likes that could not be sent due to a bad connection (up to 50; resent the next time you open the game)
- The code of the last room you created, whether you have seen the tutorial, and whether you have played online
3. Playing Doodle Theater online
What is exchanged between players
The device of the player who creates a room (the host) and the devices of the players who join connect directly using WebRTC. The following is exchanged:
- Player names, drawings (images) and the names given to drawings
- A public ID: a one-way string derived from your device key (used as the target of likes, blocks and reports)
- A rejoin token: a different one-way string derived from your device key
- Game actions (finished drawing, next page, likes, etc.)
Your device key itself is never sent to other players. Player names, drawings and drawing names are shown on the screens of players in the same room. Drawings are received by the host's device and passed to everyone in the room, and disappear when the game is closed. We do not store drawings on our servers (the only exception is a small thumbnail when a drawing is reported; see 4).
To connect devices directly, connection information including IP addresses is shared with the devices you connect to (the host and the other players). Please keep this in mind when you play in rooms open to anyone.
What our network server handles
| Matchmaking | Relays the room code, temporary connection IDs and connection information (including IP addresses) until devices connect. Not stored as records. |
|---|---|
| Relay (TURN) | When devices cannot connect directly (for example, between mobile networks), our relay server may relay the traffic. It is encrypted by WebRTC, cannot be read by the relay server, and is not stored. Relay credentials expire after one day. |
| Room list | Only when the host opens a room to anyone, the room code, number of players and whether it is in the lobby are sent. Kept only in server memory and removed after 30 seconds without an update. |
| Likes | When you send a like, your device key, the recipient's public ID and a round identifier are sent. The server does not store your device key; it converts it to your public ID and keeps "who liked whom in which round" for two weeks (to avoid double counting) before deleting it. The total number of likes received is stored per public ID. To view your own total, your device key is sent to the server (only the device holding the key can see its total). |
| Restriction check | In rooms open to anyone, the public IDs of joining players are checked against players restricted due to reports. |
| Abuse prevention | To limit repeated requests, IP addresses and request counts are kept in server memory for up to about an hour (not written to disk). |
4. When someone is reported
When you report using ⚑ in the game, the following is stored on our server and used by us to review the report and decide on action (for example, keeping the player out of rooms open to anyone):
- The reported player's public ID, the type of report (drawing or player) and the reason
- The name of the reported drawing, or the player name (up to 24 characters)
- For drawing reports, a thumbnail of the drawing (JPEG, at most 200 pixels on each side)
- A round identifier (such as the room code) and the time of the report
- Identifiers of the reporter: short one-way strings derived separately from the reporter's device key and IP address (to avoid counting the same person repeatedly). The device key and IP address themselves are not stored.
A player reported by three different people is automatically kept out of rooms open to anyone. Reports (including the thumbnail and name) are deleted 180 days after they are received, and if there are more than 5,000, the oldest are deleted first. Only the "blocked" status of a player we have stopped is kept until we lift it.
5. Analytics (Google Analytics)
To improve our games and pages we use Google Analytics by Google LLC. On this site and on the browser versions of our games opened on keigamesstudio.com and dezapatto.com, the following is sent to Google using cookies and similar technologies:
- Page views, and which page or link you came from
- Actions on the site and in games (playing a video, pressing a play button, starting a game, clearing a stage, opening the full-version info, etc.)
- Device and browser type, screen size and approximate region
We do not send personally identifiable information, drawings or player names. Google signals and ad personalization are turned off.
- See Google's page for how Google uses this information.
- To opt out, disable cookies in your browser or use the Google Analytics Opt-out Browser Add-on. The games still work.
6. Server access logs
Our servers record the IP address, time, requested URL, browser type and referrer of each request to our pages and network server. We use these only to investigate abuse and errors and to understand rough visitor numbers, and delete them after a period of time.
7. App, Steam and game-portal versions
- The app versions (Android and iOS) and the Steam versions follow the same policy, including Doodle Theater's online play (3, 4).
- In-app purchases and Steam purchases are processed by Apple, Google and Valve (Steam). We never receive credit card numbers or other payment details. We only receive whether a purchase was made, to unlock what you bought.
- Stores may provide us with aggregate, non-identifying statistics such as downloads and sales. Each store's own privacy policy applies to information handled by the store.
- The app and Steam versions, and versions on game portals such as CrazyGames and itch.io, do not use our Google Analytics (game portals follow their own rules).
- Doodle Theater's narration uses your device's (OS or browser) text-to-speech. We do not send the text to our servers.
8. Third-party services and sharing
We use the following services to run our pages and games. Your IP address and similar information reach these companies when they are used.
- Google Analytics (5)
- Google Fonts (to display the page fonts)
- Google's STUN server (to find a connection route between devices in Doodle Theater)
Except where required by law, we do not share or sell the information we store to third parties.
9. Children
Our games can be played without an account, and we do not collect identifying information from children. Children under 13 (or under 16 depending on where you live) should play with a parent or guardian. Please use a nickname, not a real name, as your Doodle Theater player name. Parents, please decide whether your child may play in rooms open to anyone.
10. Deleting your data
- Data stored on your device is deleted when you clear your browser's site data (or uninstall the app version).
- Once your device key is deleted, like totals and report records on our server can no longer be linked to your device.
- To ask us to delete records or to ask what is stored, please contact us.
11. Contact and changes
If you email us, we use your email address and message only to reply and respond.
When we change this policy, we will update this page and the date above. We will also announce major changes on this site or on X.
Operator: Kei Games
Contact: support@keigamesstudio.com (Support page)