Privacy

Offline gameplay

Roll & Roast is offline-first. Playing solo against bots or passing the device among friends stays fully offline with no account: none of it needs the multiplayer server. The browser may keep saved matches and recovery of the match in progress, preferences (including the theme), locally generated portraits, challenge and daily-challenge progress, lessons, statistics and achievements, collection looks, bot memories, rivalries, stories and best moments. This uses IndexedDB and, in some cases, localStorage. With the optional Reserve Entry rule, the saved match also includes each player’s charges, the round count and the time left on the bonus tile. Bot memory, stories, recordings and adaptive learning have in-game controls. Statistics, bot memories and stories can be exported or imported as local files of your choosing; that exchange does not upload data to us.

Private online rooms

Play Online is optional. When you create or join a private room, your browser connects to the game’s multiplayer server (by default wss://colyseus.josematoso.com), separate from the website. We send only what is needed to play: the display name you choose, your avatar seed, your colour, the room code and game commands (roll, choose a move, ready and so on). We do not ask for an account, email address, phone number or other contact details. The server rolls the dice, validates every move and decides the winner. Other people in the room see your display name, portrait, colour, connection status and the match events. Anyone with the room code or invite link can take a free seat while the room is in its lobby, so share it only with people you want to invite. We recommend a display name that does not identify you. Online matches can count towards the statistics and stories kept on this device, as in local play; Best Moments and bot learning are off online.

What the server keeps and for how long

While a room exists, the server keeps in memory and in a recovery file on the server itself: the seats (display names, avatar seeds, colours), the rules, the match state, recent match events and a SHA-256 fingerprint of each seat credential, never the credential itself. That file lets a match resume after a server update. It is deleted when the room closes and in any case removed no later than 24 hours after the last activity. Idle lobbies and finished rooms expire after 10 minutes; a match with nobody connected for 5 minutes is abandoned, with no winner, and its record is deleted.

IP addresses, logs and hosting

Like any server, the multiplayer server sees the IP address of the connection. It uses it only for abuse limits (for example, how many rooms can be created per minute), as a hash with a random salt held only in memory; the game does not store or log the IP address. Server logs contain no names, credentials, IP addresses or message contents: only event types, room codes, seat numbers, error codes and counters. The static website is hosted on Hostinger web hosting, and the multiplayer server on a Hostinger VPS managed with Dokploy. The hosting provider and the inbound proxy may keep their own technical connection logs, including IP addresses, for a limited period and for the security of the service.

Bot verification (Cloudflare Turnstile)

To protect rooms from automated creation and abuse, creating or joining a room may require a Cloudflare Turnstile check, a service of Cloudflare, Inc. When enabled, Cloudflare’s script loads only on the Play Online screen when you create or join a room, never in offline play or on these pages. To tell people from bots, Cloudflare processes browser and device signals, and the IP address of the connection to its service, under its own policy. Our server sends Cloudflare only the verification token, never your IP address, display name or room code. Cloudflare may process this data outside the European Union, with the safeguards described in its privacy policy.

Turnstile privacy addendumCloudflare privacy policy

Purposes, legal bases and choices

Local storage helps preserve matches and chosen settings. Online room data is processed to provide the service you ask for (connecting players, validating moves, recovering connections and matches); abuse limits, the hashed IP and the Turnstile check serve the legitimate interest of keeping the service secure and available. Optional Google Analytics 4 and Ahrefs Web Analytics measurement is loaded only after vendor-specific consent when the operator has configured those services. It covers known public page views and only these generic game events: starting, finishing or resuming a match, and starting a challenge. Allowed attributes are mode (solo or local) and player count from 1 to 4. Online room events are not measured; the room code in an invite link (?room=) is removed from the address bar when the page opens and is never sent to analytics. It does not send player names, room codes, invite links, reconnect credentials, avatar seeds or messages. It is not used for personalized advertising, and we do not sell personal data.

Rights and deletion

You can manage local memories, stories and recordings in game settings. Lessons, challenges, statistics, achievements and collection looks are part of the same local data and leave when you clear site data in the browser, together with the installable app cache when the browser clears it. Leaving a room removes that seat’s credential from the browser; room data on the server is deleted automatically as described above. To ask for a room to be deleted sooner, send its room code to the contact shown here. Contact the controller shown here to ask about access, correction, deletion, objection and other rights. You may also complain to your competent data protection authority.

Children and changes

Neither the offline game nor online rooms require an account or contact details. Display names are visible to the other players in a room, so we recommend that younger players use a nickname and play online with a responsible adult’s guidance. This notice is reviewed whenever data practices change.