Privacy Policy

HearthRoll is operated by HearthPlay Games LLC (“we,” “us,” “our”). This policy describes what personal data we collect when you use the HearthRoll website and apps, why we collect it, who we share it with, and what control you have over it. We tried to write it in plain language. If anything is unclear, email privacy@hearthroll.app.

Short version

• HearthRoll has no user accounts. You don’t sign up to roll dice.
• The only personal data we collect is your email address — and only if you buy the premium upgrade or request a restore link.
• We use Stripe for payments and Resend for sending email. We do not run analytics, tracking pixels, ad networks, or third-party cookies.
• Your dice history, theme preference, audio settings, and accessibility settings stay in your own browser’s local storage. We never see them.
• You can ask us to delete your data at any time by emailing privacy@hearthroll.app.

What we collect

When you use the free dice roller

Nothing personal is sent to our servers. Your dice selections, roll history, theme choice, audio levels, and accessibility preferences are stored only in your own browser’s localStorage. They never leave your device.

When you buy the premium upgrade

We collect:

• Email address. Used as the key for your premium entitlement so you can restore it later on a new device.
• Stripe customer ID. Returned by Stripe after a successful payment. Used to look up your entitlement on refunds and chargebacks.
• Purchase timestamp and (if applicable) refund timestamp. Kept for audit purposes.

Your card details are handled entirely by Stripe and never touch our servers. We never see, store, or have access to your card number, expiration date, CVV, or billing address.

When you request a restore link

We accept your email address, look it up in our entitlement records, and — only if a paid entitlement exists — email you a restore link. We do not store the email address you submitted unless it already had an entitlement.

Server logs and rate limiting

Our server records standard request metadata (IP address, timestamp, request path, user agent) for short-term security and rate-limiting purposes. We use IP addresses to throttle abusive traffic to the restore-link endpoint. These logs are retained for a short period and not used for advertising or profiling.

Where your data lives

Premium entitlements are stored in a small JSON file on our own server. The file is backed up regularly to a private storage location and is not shared with anyone outside HearthPlay Games LLC, except as necessary to deliver the service (see below).

Third-party services

HearthRoll uses two third-party services to deliver the paid product:

• Stripe — processes your payment. When you buy premium, you are redirected to Stripe’s checkout pages. Your card information is collected and processed by Stripe under their privacy policy: stripe.com/privacy.
• Resend — delivers transactional email (purchase receipts and restore links). Resend processes the “to” address and message body under their privacy policy: resend.com/legal/privacy-policy.

We do not use Google Analytics, Meta Pixel, Hotjar, advertising networks, or any third-party tracker.

Cookies

HearthRoll itself does not set tracking cookies. Stripe’s checkout pages set their own cookies for fraud prevention and session management; those are governed by Stripe’s policy linked above. The HearthRoll app uses your browser’s localStorage (not cookies) to remember your preferences locally on your own device.

Data retention

We retain your premium entitlement record for as long as you have access to the premium content, plus a reasonable audit period after a refund or chargeback. You can request deletion at any time (see “Your rights” below).

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email privacy@hearthroll.app with the email address you used to buy premium. We aim to respond within 30 days.

Deleting your premium entitlement is irreversible and will revoke your access to premium themes on every device. If you change your mind later, you will need to purchase again.

Children

HearthRoll is not directed at children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

If we make material changes to this policy — for example, adding a new third-party service or starting to collect a new field — we will update the “Last updated” date at the top of this page. For substantial changes that affect existing users, we will also notify you by email at the address tied to your entitlement.

Contact

HearthPlay Games LLC
privacy@hearthroll.app