Privacy Policy

Dicey Table ("we", "our", or "us") operates the website diceytable.com and provides a browser-based virtual tabletop platform (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

Account information

When you create an account or sign in, we collect your email address and, if you use Google sign-in, your Google profile name and avatar URL. We use Supabase to manage authentication; your password is never stored by us — we use passwordless magic links and OAuth only.

Usage data

We store data you create while using the Service: game room records, mod favorites, saved table states, and subscription status. This data is associated with your account and stored in our Supabase-backed database.

Technical data

Standard web server logs may record your IP address, browser type, and pages visited. WebRTC peer connections are established directly between players; we do not record or store in-game audio, video, or real-time gameplay data.

Analytics

We use Google Analytics to understand how the Service is used so we can improve it. It records pages viewed, which features you use (for example starting a table, importing a model, or publishing a mod), device and browser capabilities such as your graphics tier, and performance measures such as frame rate and connection quality. Where you are signed in, these are associated with your account identifier so we can count people rather than browsers. Advertising and personalization signals are switched off, and we do not send Google your email address, username, table contents, chat messages, or the identifiers of rooms you join. Some events are sent from our servers rather than your browser, so that features like publishing are counted accurately even when a browser extension blocks the analytics script.

Billing data

Subscription payments are processed by Stripe. We do not store your credit card number or full payment details. Stripe shares limited billing metadata (subscription status, plan) with us to gate features.

2. How We Use Your Information

• To authenticate you and maintain your session.
• To save your game preferences, favorites, and table history.
• To manage and display your subscription plan and billing status.
• To send transactional emails (sign-in links, receipts). We do not send marketing emails without your explicit opt-in.
• To operate TURN/STUN relay servers that help players establish peer connections.

3. Mods and Community Content

Mods are hosted publicly on GitHub by their respective authors. When you install or favorite a mod, we record that association in your account. We do not host mod assets ourselves; all mod scripts run in a sandboxed browser iframe and cannot access your account data or device storage.

4. Data Sharing

We do not sell your personal data. We share data only with the service providers necessary to operate the platform:

• Supabase — authentication and database hosting.
• Stripe — payment processing.
• Render — server and static site hosting.
• Google Analytics — product usage measurement (see “Analytics” above).

We may disclose data if required by law or to protect the rights and safety of users.

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by emailing us at [email protected]. Backups may retain data for up to 30 days after deletion.

6. Cookies and Storage

We use browser localStorage to store your session token so you stay signed in. Google Analytics sets first-party cookies (_ga and similar) to tell repeat visits apart; these are used only for measurement. We do not use advertising cookies or cross-site trackers, and advertising signals are disabled in our Google Analytics configuration. You can block analytics with any content blocker or your browser’s tracking protection — the Service works normally without it.

7. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us their information, contact us and we will delete it promptly.

8. Your Rights

Depending on your jurisdiction you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, email us at [email protected].

9. Security

We use HTTPS everywhere, store session tokens securely, and rely on industry-standard practices for our hosting providers. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes

We may update this policy from time to time. We will post the revised policy on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the new policy.

11. Contact

Questions? Email us at [email protected].