The short version: playing needs nothing from you. Buying stores the email you paid with and what you bought. That is the whole list. The long version follows, in the order it matters.
No account, no email, no sign-up. The names typed at a table live in the host's browser and in the room's channel for the night, so the phones and the screen can see each other. We do not store them. When the room closes, they are gone.
We count, we do not track. Each browser gets a random id that means nothing outside this site, and we record a handful of events against it: a room opened, a game finished, the shop viewed, a purchase made. That is how we know whether game night is happening.
When you buy something we keep your email, what you bought, when, and your founder number if you took one. That ledger lives on our own database, hosted by Supabase.
Card numbers never touch us. Stripe processes the payment and keeps the transaction record. roller.wtf is the merchant on your receipt.
Sign-in is a six-digit code sent to the email you bought with. There is no password, and there never will be one. On a new computer, same email, new code. When you ask for a code, Cloudflare runs a quick check in your browser to tell a person from a bot. It never sees your email.
If you sign in a screen with your phone, we keep a short record of that request: which kind of device asked, and a scrambled form of its internet address so we can warn you when the phone and the screen are not on the same connection. It is erased as soon as the screen is signed in or the request expires, and old requests are cleared out regularly.
A few companies run parts of the site for us. When your browser talks to one of them, it sees what any website sees: your IP address and what was asked for. We never hand them your email, and none of them are here to track you.
We email you sign-in codes and receipts. Nothing else. There is no marketing list. If one ever exists it will be a separate box you tick yourself, unticked by default.
Open your account from the menu and tap "Delete my account." We send a code to your email first, so a screen someone else signed in cannot delete your account. Once you type the code, it happens immediately. Your email and everything it owns leave our ledger, and the sign-in stops working.
Deleting means your purchases are gone from the site. There is no undo and no refund from that button. Stripe's transaction record and our tax books keep the sale, because the law requires it, with nothing attached that unlocks anything.
Game state so a refresh does not lose the night, your theme and jukebox choices, the sign-in session if you signed in, and remembered preferences like which shelves you folded. All of it stays on your device. No cookies are used for tracking.
The site is not directed at children under 13. Because playing stores nothing, playing collects nothing from anyone, of any age.
Two things at the table are for grown-ups, and both are off until somebody turns them on. The After Dark music packs come with the pack that holds them. The 18+ announcer makes the announcer swear: any host can switch it on, from the menu on the screen running the game, and we ask once whether everyone at the table is grown before it turns on. Both stay off until then, a guest's phone cannot turn either on, and the answer you give lives in your own browser. It is your word, not a check on your age, and it is the host's call for the room.
If this page changes, the date at the top changes with it and we say so in the Discord.
Questions, corrections, or a request to see what we hold about your email: hello@roller.wtf. Effective date: 2026-09-21.