Retiroll Logo
Retiroll
Play Free
Legal & Transparency

Privacy Policy

We believe privacy is a fundamental right. Retiroll is built from the ground up as a client-side, privacy-respecting platform.

🛡️
In short:Retiroll doesn’t sell your data, doesn’t require accounts, and stores nothing on our servers. Your game rosters live in your browser — on your device, under your control.

Last Updated: September 20, 2026

1. What This Policy Covers

This policy explains what data Retiroll (“we”, “us”) collects and how we handle it. It applies when you use any feature at retiroll.online.

Questions? Email us at [email protected].

2. Data Collection & Accounts

Retiroll was built with a privacy-by-design architecture:

  • No accounts required to play. You can use every physics engine, spin wheels, roll dice, and join games with 6-digit codes completely anonymously without ever registering an email.
  • Optional Host Accounts: If you choose to create a host account, we store only your verified email address and an encrypted password via secure, industry-standard authentication (Supabase Auth). We never share or sell your email address.
  • No biometric or location tracking. We don’t request GPS, camera, microphone, or contact permissions.

3. Local Storage (Data on Your Device)

To keep your setups between visits, Retiroll uses your browser’s localStorageAPI. This data stays on your device — we never read or sync it.

What’s stored locally:

  • Your game sets — names, weights, colors, and items you create in Host Studio or Sandbox.
  • Your preferences — theme (dark/light), audio settings, and recent spin history.

You can delete all of this anytime by clearing your browser’s local storage or resetting your game sets in the dashboard.

4. Cookies & Advertising (Google AdSense)

To keep Retiroll 100% free, we display ads through Google AdSense. Google and its partners may use cookies to serve ads based on your browsing history.

  • You can opt out of personalized ads at Google Ads Settings or aboutads.info.
  • We display a cookie consent banner for users in regions that require it (EU/UK ePrivacy Directive). You can adjust your preferences at any time via the consent controls.

Third-party ad networks may automatically receive your IP address when serving ads. Retiroll has no access to or control over cookies used by these third parties. See Google’s Advertising Policies for details.

5. Analytics (Google Analytics)

We use Google Analytics 4to understand traffic patterns — page views, session duration, device type, and approximate country. No roster data or game content is sent to Google.

6. Children’s Privacy (COPPA)

Retiroll is frequently used in classrooms. We take children’s privacy seriously and comply with the Children’s Online Privacy Protection Act (COPPA):

  • We do not knowingly collect personal information from children under 13.
  • When a teacher enters student names into a picker, that data stays entirely in the local browser. It is never transmitted to our servers.
  • If you believe any child’s personal information has been inadvertently provided to us, contact us at [email protected] and we’ll act immediately.

7. Data Security

  • No backend databases store your content — your rosters and game sets never leave your device.
  • All traffic between your browser and our servers is encrypted with TLS 1.3 / HTTPS.
  • We enforce HSTS, CSP, and X-Frame-Options headers to prevent interception and clickjacking.

8. Data Retention

We don’t retain your data — you do. Your game sets and preferences exist only in your browser’s local storage. We have no server-side copy to delete because none is ever created.

Server log files (IP addresses, user-agent strings) are retained by our hosting provider for up to 30 days for security monitoring and are then automatically purged.

9. Your Rights (GDPR, CCPA & International)

Depending on your location, you may have statutory data protection rights:

  • Access & Portability: Export your game sets as JSON or CSV from Host Studio at any time.
  • Deletion: Clear your browser’s local storage to remove all saved data instantly.
  • Object to tracking: Decline non-essential cookies via the consent banner or your browser’s privacy controls.
💡
International transfers: Google Analytics and AdSense may process data in the United States. Google participates in data transfer frameworks as described in their privacy documentation.

10. Changes & Contact

We may update this policy as features evolve or laws change. When we do, we’ll revise the “Last Updated” date at the top.

Retiroll Privacy Team

Email: [email protected]

Website: https://retiroll.online