diceup (“diceup”, “we”, “us”, or “our”) operates diceup.io, a free, browser-based, real-time multiplayer property board game. This Privacy Policy explains what information we collect when you visit the site, play as a guest, create an account, or purchase cosmetic items, and how we use, share, and protect that information.

This policy applies to the diceup website, game client, and related services (collectively, the “Service”). It does not apply to third-party websites, services, or platforms that we link to or integrate with, which are governed by their own privacy policies. By using the Service, you acknowledge the practices described here.

We aim to collect as little as possible to run the game. The information we handle falls into a few categories:

• Guest data. If you play without an account, we store a nickname you choose locally in your browser so we can display it in lobbies and matches. Guests are not required to provide an email address or any personal identifiers.
• Account data. If you create an optional account, we store your display name, login credentials or third-party sign-in identifier, and the cosmetic items and preferences tied to your profile.
• Gameplay data. While you play we process in-game actions, dice rolls, turn state, room membership, and chat messages so that matches can be synchronized across players in real time.
• Purchase data. If you buy cosmetic items, our payment processor handles your card or billing details. We receive a confirmation of the transaction and a record of what was purchased, but we do not store full card numbers on our servers.
• Device & usage data. Like most online services, we may automatically receive technical information such as your IP address, browser type, device type, screen size, approximate region, and interaction events used for performance and analytics.
• Cookies & local storage. We use browser storage to keep you signed in, remember your nickname and preferences, and maintain active game sessions (see Section 7).

We use the information described above only to operate and improve the game:

• to run matchmaking, lobbies, and real-time gameplay;
• to create and maintain your profile and sync cosmetics you own;
• to process purchases of cosmetic items and prevent fraudulent transactions;
• to display chat and nicknames to other players in your room;
• to detect, investigate, and prevent cheating, exploits, and abuse;
• to diagnose bugs, monitor performance, and understand which features are used;
• to communicate important service or security notices; and
• to comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it for third-party advertising.

Where the EU/UK General Data Protection Regulation (GDPR) or similar laws apply, we rely on the following legal bases:

• Contract. Processing necessary to provide the game you asked to play, including accounts, matchmaking, and purchases.
• Legitimate interests. Keeping the Service secure, preventing cheating and fraud, and improving gameplay, balanced against your rights.
• Consent. Optional analytics and any non-essential cookies, which you can withdraw at any time.
• Legal obligation. Retaining records where required by law, such as for tax or accounting purposes related to purchases.

We share information only with service providers who help us run the game, and only to the extent needed to perform their function. These may include:

• cloud hosting and real-time infrastructure providers who run our servers;
• a payment processor that handles cosmetic purchases;
• authentication providers if you sign in with a third-party account;
• privacy-respecting analytics and error-monitoring tools; and
• professional advisors or authorities where disclosure is legally required.

These processors are bound by contractual obligations to protect your data and use it only on our instructions. We may also disclose information if required to respond to lawful requests, protect the safety of users, or as part of a merger, acquisition, or sale of assets, in which case we will notify you of any material change.

diceup relies on browser local storage and a small number of cookies to function. Essential storage keeps your nickname, session, sign-in state, and preferences available so the game works. We may also use limited analytics storage to understand aggregate usage, which is only enabled where permitted or with your consent.

You can clear cookies and local storage through your browser settings at any time. Doing so will sign you out, clear your locally stored guest nickname, and reset preferences on that device.

We keep personal data only as long as necessary for the purposes described in this policy. Guest nicknames live in your browser and are removed when you clear local storage. Account data is retained while your account is active. Gameplay and chat data associated with a match is typically short-lived and cleared when a room closes, though limited logs may be retained temporarily for moderation, debugging, and abuse prevention.

Transaction records for cosmetic purchases may be kept longer where required for financial and legal compliance. When data is no longer needed, we delete or anonymize it.

We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and limiting who can access production systems. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we become aware of a breach that affects your personal data, we will notify affected users and regulators as required by law.

diceup is not directed to children under 13 (or the minimum age required in your country, such as 16 in parts of the EEA). We do not knowingly collect personal information from children below that age. Guests can play with a locally stored nickname and without an account, but account creation and purchases are intended for users who meet the age requirements in our Terms of Service.

If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Depending on where you live, you may have rights over your personal data, including the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your account and associated data;
• object to or restrict certain processing;
• withdraw consent for optional analytics; and
• request a portable copy of your data.

If you are in the EEA/UK you may exercise GDPR rights, and if you are a California resident you have rights under the CCPA/CPRA, including the right to know, delete, and opt out of the “sale” or “sharing” of personal information — which we do not do. To make a request, contact us using the details below. We will not discriminate against you for exercising these rights.

diceup is played worldwide, and our service providers may process data in countries other than where you live, including outside the EEA or UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to ensure your data remains protected.

We may update this Privacy Policy as the game evolves or as legal requirements change. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide a more prominent notice. Continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy, want to exercise your rights, or wish to report a concern, reach out through the contact links in the footer. We aim to respond to privacy requests within a reasonable timeframe and in accordance with applicable law.