Privacy Policy

Who can use the app

Anyone can create an account. Sign-up is open and is confirmed by email verification — you register with an email address and a username, choose a password, and click a link we send to confirm the address is yours. (In some cases an invite code from an existing group may be used as a fallback way to join.) People aged 13 and over can register for themselves. Children under 13 cannot sign up on their own; a parent or guardian sets up a child account for them, as described under Children and families below.

What we store

We keep only the information needed to run the app for you and the people you play with:

• Account details — your username, display name, and email address.
• Date of birth & age band — when you sign yourself up you provide your date of birth, which we use to confirm you are old enough to have your own account and then keep on your account. We also record your age band (Teen 13–17 or Adult 18+). Child accounts, which a parent creates, store no birthdate or age at all.
• Your games — the board games you add to your shelves, your wishlists, and the ratings you give them.
• Play history — records of game nights, scores, results, and stats you log.
• Photos — pictures you upload of games or game nights, visible only within your circle.
• Messages — group chat messages and direct messages you send inside the app.
• Push-notification subscriptions — if you turn on notifications, the device subscription that lets us send them. You can remove this in the app at any time.

How we use your email

Your email address is used only for essential app messages: verifying your account, resetting your password, and game-night invitations, reminders, and notification emails. We do not send marketing email, and we never sell or share your address for anyone else's purposes. To deliver these messages we use a third-party email delivery provider, which processes your email address — and, for a child account, the parent's email address and the child's display name shown in the consent message — solely to send the message on our behalf.

Advertising, analytics, and tracking

There are none. The app contains no advertising, no behavioral ad profiles, no analytics SDKs, and no third-party tracking — for anyone, and especially never for children. We do not sell your data.

When information leaves the app

Your personal content stays within your private circle. We do not sell, rent, or share your information for any third party's own purposes. The app itself carries no third-party fonts, analytics, ad, or tracking code — pages load only from our own servers. The only outside services involved are these service providers and optional integrations:

• BoardGameGeek: game box art and cover images are fetched from BoardGameGeek so your shelf looks right. No personal information is sent to obtain these images.
• YouTube: if you choose to play a how-to-play or walkthrough video, it is embedded from YouTube (which also serves the video's thumbnail image), and YouTube receives that request under its own privacy policy. Children see videos only after an adult has approved them.
• Email delivery provider: a third-party service delivers the account and game-night emails described above, receiving the recipient's email address only for that purpose.
• Calendar (optional): if you choose to add a game night to your calendar, the link opens in the calendar service you pick.

Children and families

Roll for Games is safe for families, and we take children's privacy seriously. This section explains how child accounts work under the U.S. Children's Online Privacy Protection Act (COPPA) and similar rules.

• No self sign-up. Children under 13 cannot create their own account. A parent or guardian who is 18 or older creates a child sub-account from within their own account. The minimum self-signup age is applied by region (for example 13 in the US, 14 in Canada).
• Where child accounts are offered. Child sub-accounts are currently available only to parents in the United States and Canada.
• Verifiable parental consent. Before a child account becomes active, we obtain the parent's consent using an email-plus method: we send a confirmation link to the parent's own verified email address, which the parent must click to approve the account.
• Minimal data for kids. Child accounts store no email address and no birthdate. We collect only what the child needs to use the app with their family and friends.
• Parents stay in control. A parent can review their child's information, monitor the child's messages, and delete the child's account and data at any time.
• Walled off from strangers. Child accounts cannot join groups on their own, cannot search for or friend strangers, and cannot receive direct messages from people outside their circle.
• Never targeted. We show children no ads and run no behavioral tracking or profiling of any kind.

If you believe a child has provided us information without the required parental consent, please contact us at privacy@rollforgames.com and we will delete it.

How your data is protected

The app is served over an encrypted (HTTPS) connection, so information is encrypted while it travels between your device and our server. Passwords are stored in hashed form, never as plain text. Access to your content is limited to the members of your circle.

Keeping and deleting your data

We keep your information only for as long as your account is active and we need it to provide the app to you and the people you play with. You can remove push-notification subscriptions yourself in the app at any time.

Delete or download your data in the app. You can permanently delete your account, or download a copy of your data, directly in the app under Profile → Your data & account. Deleting a parent's account also deletes the child accounts they manage. If you can't sign in, you can request deletion on our account deletion page or email privacy@rollforgames.com. Once an account is deleted we remove its personal data, except limited records we must keep to meet a legal obligation.

Children's data. We retain a child account's information only for as long as it is reasonably necessary to provide the family features it is used for. A parent can review, export, or delete the child's account and its data at any time from their own account, and we delete a child's personal information when it is no longer needed for that purpose or upon the parent's request. We use children's personal information only to operate the app; we do not disclose it to any third party for that party's own purposes.

Changes to this policy

If we make meaningful changes to how we handle your information, we will update this page and change the effective date at the top.