RollcrownPrivacy policy
This policy explains what the Rollcrown game (Android and iOS) collects, why, and the choices you have. The Rollcrown team ("we") is responsible for your data (the "controller"). Questions and requests: admin@rollcrown.fr.
In short
- You don't need an account and we never ask for your real name, email or phone number.
- Your progress (level, belts, characters, settings) is saved on your phone. If you choose to sign in with Google or Apple, it is also saved online so you keep it on another phone.
- If you play online, we store the player name you choose, your online games, your friends list and your online rating.
- If you allow notifications, we keep a notification token for your phone to tell you when it's your turn.
- The game sends anonymous usage statistics so we can improve it. You can turn this off in Settings.
- The game shows ads from Google AdMob. Where the law requires it, you choose whether ads may be personalised.
- We don't sell your data.
1. Data kept on your device only
Your settings (sound, speed, graphics), the character you picked, your experience points, level and belts, the characters you unlocked, your daily reward calendar and whether you finished the tutorial are saved in a file on your phone. We never receive this file. It is deleted when you uninstall the game.
2. Your anonymous account
At first launch (or when you first open Online, if you turned usage statistics off) the game creates an anonymous account for you: a random identifier and a sign-in token, with no email or password. It is used for online play and usage statistics. Our online service runs on Supabase, a hosted database service (Supabase Inc., on Amazon Web Services servers in Frankfurt, Germany (EU)). We store:
| Data | Why | Who can see it |
|---|---|---|
| Random player identifier and sign-in token | To know which games and seats are yours | Only us |
| Player name you choose, character, belt | To show you to the other players | Players of your games |
| Games you create or join: join code, settings, moves, dice rolls, results, times | To run the game fairly (the server rolls the dice) and let everyone replay it | Players of that game |
| Friend code, rating, number of online games and wins | To add friends and rank you on your friends' leaderboard | Signed-in players (your code lets them send you a friend request) |
| League: XP from each game you finish (offline games too), your weekly group and rank, weekly, monthly, yearly and all-time league XP, trophies | To run the weekly league and the monthly, yearly and all-time leaderboards | Other players: the league shows your player name, character, belt, trophies and league XP |
| Your friends and friend requests | To show your friends list and leaderboard | You and that friend |
| Notification token of your phone and the game's language (only if notifications are on) | To tell you when it's your turn or a game ended | Only us |
| Only if you sign in with Google or Apple: that account's identifier and the email address it shares with us (Apple lets you hide it behind a relay address), and your progress (XP, belt, characters unlocked, wins per character, daily reward calendar, tutorial done) | To keep your progress and your online profile when you change phones | Only us |
Signing in with Google or Apple (optional)
From your profile you can sign in with your Google or Apple account. Sign-in happens in Google's or Apple's own window (your phone's account sheet, or their page in your browser); we never see your password. Your anonymous account then becomes that account: same games, friends and rating, and your progress is saved online and merged with any other phone you sign in on. We use the email address only to find your account if you ask us to delete it. Legal basis: performing the service you asked for.
Notifications
When it's your turn in an online game, or a game ends, our server sends a notification to your phone through Firebase Cloud Messaging (Google). For this the game registers a notification token (a random identifier of the app on your phone) with us and Google; the notification contains only the game's join code and short text. Your phone asks whether Rollcrown may show notifications; you can turn them off at any time in your phone's settings. Legal basis: providing the game you asked for.
The server also handles technical data such as your IP address and connection logs, kept briefly to keep the service secure and working. Please don't use your real name as your player name.
Legal basis (EU/UK): providing the game you asked for (contract), and our legitimate interest in keeping it secure and fair.
Usage statistics
To see how the game is played and improve it (difficulty, tutorial, features), the game sends us a few events linked to your anonymous account: game started and finished (mode, number of players, AI level, result, length), tutorial finished or skipped, daily reward claimed, ads shown and reward videos watched, technical error reports (the error message and where in the game's code it happened), plus your level, the graphics setting, the app version, your phone's operating system and when the game was opened. Nothing you type is sent. They are used only by us, only as statistics, never shared or used for advertising, and deleted after 90 days. You can turn them off at any time in Settings → Share anonymous stats; what was not sent yet is then deleted from your phone. Legal basis: our legitimate interest in improving the game.
3. Advertising
Rollcrown is free and shows ads through Google AdMob: short videos you choose to watch for a reward (for example doubling your XP), and now and then a full-screen ad between two games. To show and measure ads and to prevent fraud, Google may collect your device's advertising ID, IP address (approximate location), device and app information and your interactions with ads.
- EEA, UK and Switzerland: the first time you open the game, Google's consent form asks whether ads may be personalised. You can change your answer at any time with Settings → Ad choices. Without consent you still see ads, but they are not personalised.
- iPhone: iOS asks whether the game may track you across apps; if you say no, the advertising ID is not shared.
- Android: you can reset or delete your advertising ID in your phone's settings (Privacy → Ads).
How Google uses this data: How Google uses information from sites or apps that use its services and the Google privacy policy. Legal basis: your consent for personalised ads, our legitimate interest for non-personalised ads.
4. Who receives data
Only the service providers above: Supabase Inc. (hosts our database, without access to its content for its own purposes), Google (ads, notifications through Firebase Cloud Messaging, and sign-in if you choose it) and Apple (sign-in if you choose it), each under its own privacy terms. Some of them may process data outside your country, including in the United States, with the safeguards required by law (such as the EU Standard Contractual Clauses). We don't sell or rent your data.
5. How long we keep it
The moves of an online game are deleted 7 days after it ends; the finished game (players, result, final board) 180 days after it ends. A game lobby that never starts is deleted after 7 days, a game without any move for 60 days after that. Your anonymous account and player profile are deleted once none of your games is left and no usage statistics came from it for 90 days; your friends list goes with it. Weekly league groups are deleted 2 weeks after the week starts, monthly league totals 2 years after the month starts; your all-time league XP and trophies stay with your profile. An account signed in with Google or Apple, and its saved progress, is kept until you ask us to delete it. A notification token is deleted when Google reports the app gone from your phone, or after 60 days without the game being opened. Device data stays on your phone until you uninstall the game.
6. Delete your data
Uninstalling the game deletes everything stored on your phone. To delete your online profile and games, email admin@rollcrown.fr with the player name shown in the game's Online screen (and, if you can, a join code of one of your games; if you signed in with Google or Apple, write from that account's email address). We delete it within 30 days and confirm by email. In finished games that other people played, your moves stay, shown as a deleted player, so their games still make sense.
7. Your rights
Depending on where you live (for example under the EU/UK GDPR), you can ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw consent at any time. Write to admin@rollcrown.fr. You can also complain to your data protection authority (in Luxembourg: the CNPD, cnpd.public.lu).
8. Children
Rollcrown is not directed at children under 13 (or the minimum age in your country) and we don't knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
9. Changes
If this policy changes, we will update this page and its date; important changes will also be shown in the game.