Privacy Policy for Skribbl Shape Tools
Last updated: 6 October 2026
Overview
Skribbl Shape Tools is a Chrome extension that adds drawing tools and optional stats tracking to skribbl.io. The extension works fully without an account. Account features are optional and described below.
Data stored on your device
The extension saves your settings (keyboard shortcuts and feature preferences) locally in your browser using localStorage. If you log in, your session token is stored in the extension's storage (chrome.storage.local). This data stays on your device and is used only to remember your preferences and keep you logged in. Logging out removes the session token.
Data collected if you create an account
Creating an account and playing in public lobbies with stats tracking enabled sends the following data to our server, hosted on Cloudflare:
Account data: your username and a password hash. Your password is processed on your device before it is sent, and we never receive or store your plain-text password.
Gameplay stats: matches played, placements, scores, words guessed, guess speed, typing speed (words per minute), likes received, guess streaks and the date you registered.
Lobby presence: while you are in a skribbl.io lobby, the extension sends the lobby code, your in-game player ID, your in-game name, the lobby language and round information, so other extension users in the same lobby can see that you are using the extension and so stats can be verified.
Connection data: your approximate network latency and your IP address. The IP address is used only for rate limiting and abuse prevention.
Optional profile settings: such as background and incognito mode, if you are eligible to use them.
If you do not create an account, the extension does not send your stats to our server. Anonymous users may still send lobby presence data to the server when in a public lobby.
Public information
Your username and gameplay stats are visible to other users through profiles and the leaderboard. Do not use a username that contains personal information.
What we do not collect
We do not collect your email address, real name, browsing history, or anything outside skribbl.io. We do not sell your data, share it with advertisers, or use analytics or tracking tools.
Third-party services
Cloudflare hosts our servers and database and processes requests on our behalf.
Cloudflare Turnstile is used as a captcha on sign-up and on suspicious login attempts. It may process technical information about your browser to tell humans from bots, under Cloudflare's own privacy policy.
Moderation
Accounts that cheat or abuse the service may be banned. A ban record stores the ban date and reason.
Data retention and deletion
Account data is kept until you ask us to delete it. Detailed event logs are removed automatically after a limited period. To request deletion of your account and data, email the address below from your account's context, including your username.
Children's privacy
The extension is not directed at children under 13, and we do not knowingly collect their personal data.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date.
Contact
For questions or data requests, contact: raaa76243@gmail.com