Privacy

What we collect

• Your username and a random token in a cookie that identifies your browser. We store only a digest of the token.
• If you sign in with X: your X user id, handle, and avatar URL.
• If you sign in with GitHub: your GitHub user id, login, and avatar URL.
• If you create an account: your email and a hashed password.
• If you pay: the email you used at checkout, and the payment records our provider sends us (amounts, ids, status). We never see card numbers.
• If you claim a perk: the email you typed, used only to send that perk. It is deleted 90 days after the game ends.
• IP addresses, hashed with a daily salt, for rate limiting and click counting. We do not keep raw addresses.
• Game events: rolls, landings, purchases, rent, and clicks, tied to usernames.

What we do not do

• We never share your email with sponsors or advertisers.
• We run no third-party analytics or advertising scripts.

Cookies

One cookie identifies your browser so you can keep your name and your lots. Signed-in accounts also use a session cookie. Nothing else.

Who sees your data

Our hosting (DigitalOcean), storage and CDN (Cloudflare), email delivery (Resend), payments (Dodo Payments), error monitoring (Sentry), and the content-review service (Anthropic) process data on our behalf.

Your rights

Email [email protected] to access, correct, or delete your data. Ownership records stay on the frozen board; we can replace your username with a placeholder on request.