Privacy Policy
Last Updated: August 2026
At வர்ணம் (Varnam), accessible from varnam.fun, the privacy of our visitors and creators is of utmost importance. This Privacy Policy details our data collection practices, our ephemeral canvas architecture, our third-party advertising disclosures (Google AdSense), and your rights under GDPR and CCPA.
1. Data Controller & Operator Overview
வர்ணம் is operated as an open, accessible collaborative drawing utility. For any inquiries, data deletion requests, or regulatory questions, our designated Data Protection Lead can be reached at exceptionz13@gmail.com. We acknowledge and address all privacy requests within 24 to 48 business hours.
2. Information We Collect & Collection Methods
We believe in strict data minimization. We only collect the minimal information necessary to deliver live, low-latency collaborative sketching:
A. Google Sign-In & Authentication Data (Firebase Auth)
When you authenticate via Google, credentials are verified directly through Google OAuth servers. We never receive or store your Google password. We receive:
- Display Name: Rendered to your drawing collaborator in the active room to identify your cursor and stroke ownership.
- Email Address: Used solely as an account identifier and for processing direct account requests.
- Profile Photo URL: Displayed in the room header so collaborators recognize who has joined.
- Firebase User UID: A pseudonymous identifier used to manage canvas permissions and stroke attribution.
B. Ephemeral Canvas Stroke Data
During an active drawing session, vector stroke points (X/Y coordinates, pressure, stroke timestamps), tool types (pencil, soft brush, shapes, text notes, eraser), hex color values, and cursor coordinates are synchronized across secure WebSockets (wss://) into Firebase Realtime Database strictly for live collaboration.
C. Local Browser Storage (localStorage)
To preserve your preferences without tracking you across the web, your browser saves your 12 custom color palette swatches, brush thickness settings, and cookie consent preferences locally in localStorage.
D. Automated Technical Infrastructure Logs
Our hosting edge servers (Firebase Hosting) automatically log transient request data (IP address, browser user-agent, operating system, and timestamp) strictly for DDoS mitigation, load balancing, and network diagnostics.
3. Legal Bases for Processing Under GDPR (Article 6)
For visitors residing in the European Economic Area (EEA) and the United Kingdom, our processing is justified under the following statutory grounds:
- Contractual Necessity (Art. 6(1)(b)): Delivering live two-person drawing rooms, cursor tracking, and stroke synchronization requested by users.
- Legitimate Interests (Art. 6(1)(f)): Maintaining server uptime, preventing abusive automated scraping, defending against DDoS attacks, and diagnosing performance bottlenecks.
- Consent (Art. 6(1)(a)): Delivering third-party advertising cookies via Google AdSense where consent is required by local directives.
4. Ephemeral Canvas Architecture & Data Minimization
Drawing rooms in வர்ணம் are transient workspaces. We do not maintain a permanent, searchable cloud gallery of user drawings. When participants leave a room or after an inactivity timeout, room stroke data is flushed from our database. Artists wishing to preserve their artwork are advised to export their canvas illustration or capture a screenshot prior to closing the session.
5. Google AdSense, DoubleClick DART Cookies & Advertising Disclosure
To sustain our free collaborative drawing platform without charging subscription fees, we partner with Google AdSense to display third-party advertisements.
- Google, as a third-party vendor, uses cookies to serve ads on
varnam.fun. - Google's use of the DoubleClick DART cookie enables it and its partners to serve targeted ads based on your visit to this website and other sites on the internet.
- Users may opt out of personalized advertising by visiting Google Ads Settings.
- You may also opt out of third-party advertising cookies via the Digital Advertising Alliance at aboutads.info or European Interactive Digital Advertising Alliance at youronlinechoices.eu.
6. Cookie & Storage Inventory
| Storage Key | Provider | Category | Duration | Purpose |
|---|---|---|---|---|
__session | Firebase Auth | Strictly Necessary | Session / 1h | Maintains Google OAuth session across room pages. |
varnam_palette | varnam.fun | Preferences | Persistent | Saves your 12 custom color palette swatches in localStorage. |
__gads, __gpi | Google AdSense | Advertising | 13 Months | Ad delivery, fraud prevention, and frequency capping. |
IDE | doubleclick.net | Targeted Ads | 1 Year | Google DoubleClick interest-based ad targeting. |
7. Data Retention & User Deletion Rights
You have full authority over your data. To request permanent deletion of your account credentials and any associated records, email exceptionz13@gmail.com with the subject Data Deletion Request. Requests are verified and completed within 48 business hours. You can also revoke Google OAuth permissions at any time via myaccount.google.com/permissions.
8. California Consumer Privacy Rights (CCPA / CPRA)
Under the California Consumer Privacy Act, California consumers have the right to know what personal information is collected, request its deletion, and not receive discriminatory treatment. வர்ணம் does NOT sell or share personal information for monetary or commercial consideration.
9. Children's Privacy (COPPA Compliance)
ವರ್ணம் is not directed to children under 13 years of age. We do not knowingly solicit or collect personal information from children under 13. If a parent or guardian becomes aware that their minor child has provided personal data without parental consent, please contact us at exceptionz13@gmail.com for immediate deletion.
10. Contacting the Data Protection Lead
For questions or privacy requests, please contact our team via email at exceptionz13@gmail.com or visit our Contact Page.