Legal

Privacy Policy

Last updated: 3 November 2026 (last online, results against the computer)

No ads, no trackingNo analytics, no advertising IDs, no third-party SDKs.

Only what the game needsA name, your games and ratings; an e-mail only if you register.

Stored in GermanyOur server runs at Hetzner in Germany.

Delete any timeProfile → Delete account removes your data at once.

Rollmate is a strategy game with dice. This policy explains which personal data we process when you use the Rollmate app and the server at rollmate.elbe.games, why we do it and which rights you have. We collect only what the game needs. Rollmate has no advertising, no analytics and no tracking.

Who is responsible

Elbe Games
Hamburg
E-mail: info@elbe.games

Guest account

When you first open the app, it creates a guest account on our server so you can play online. A guest account consists of a randomly generated name (for example “Pitty Penguin”), your app language and a session token. We store only a hash of the token; the token itself stays on your device in the system's secure storage.

Registered account

If you choose to register, we additionally store your e-mail address and your password. The password is stored only as a salted hash (scrypt); we never see or store it in plain text. To confirm your address or reset your password, we send you an e-mail with a single-use link. Confirmation links expire after 24 hours, password reset links after one hour; we store only hashes of these links. A registered account can choose its own username.

Sign in with Apple

If you sign in with Apple, Apple confirms your identity to us. We receive and store a stable Apple user ID and, if you share it, your e-mail address – this may be an anonymous relay address from Apple. We do not receive your Apple password. To be able to revoke Sign in with Apple when you delete your account, we also store a token issued by Apple; deleting your account revokes it at Apple.

Games, ratings and what others see

For online games we store the moves, the result, the time and, for ranked games, the ratings before and after. Your ratings (Glicko-2) and the number of rated games are stored per mode.
Other players see your username and rating during a game, on the leaderboard, in their game history and in replays. Finished games can be replayed by other signed-in players.
Your public profile shows your username, your icon if you chose one, whether your account is confirmed, your ratings, the number of finished games, your results against the computer, your daily puzzle streak and when you joined. Other players can find you by your username.
For the daily puzzle we store your current and best streak and the day you last solved it. Your attempts are played on your device; only a solution is sent to us to be checked.
For friends we store friend requests, friendships and the players you block. Your friends see whether you are online right now and, while you are offline, when you were last online (we store the time of your last connection); nobody else does. Players you block can no longer find you, see your profile, send you requests or be matched with you.
Games against the computer run entirely on your device; the moves are not sent to us. The app reports only the level and the result (won, lost, draw) of each finished game, and we count them per level for your public profile. If your device is too slow, the app may ask our server for a computer move; we then process the position to compute the move and do not store it.

Technical data

When the app connects to our server, your IP address and the requested address are processed to deliver the service, to keep connections alive and to protect against abuse (for example limiting repeated login attempts). Our server writes short technical logs (time, IP address, request). They are used only to operate and secure the service and are rotated and deleted after a short time. The same applies when you visit this website: it sets no cookies and loads nothing from third parties – fonts and images come from our own server.

Data on your device

The app stores on your device: the session token (secure storage), a copy of your profile for offline starts, your settings, saved and finished computer games. Deleting the app removes this data.

Purposes and legal basis

Providing the game, your account, matchmaking, ratings and e-mails you request: performance of our contract with you (Art. 6(1)(b) GDPR).
Security, abuse prevention and technical logs: our legitimate interest in a safe and working service (Art. 6(1)(f) GDPR).

Service providers

Hosting: Hetzner Online GmbH, Germany. All server data is stored in Germany.
E-mail delivery: united-domains GmbH, Germany, sends our confirmation and password reset e-mails.
Sign in with Apple: Apple Inc. confirms your identity when you choose to sign in with Apple.

Both process data only on our behalf and under a data processing agreement. We do not sell or share your data with anyone else. Apple (App Store, TestFlight) and Google (Play Store) process data under their own privacy policies when you download the app.

How long we keep data

We keep your account and games as long as your account exists. You can delete your account at any time in the app (Profile → Delete account). This removes your account, username, e-mail address, password hash, Apple user ID, sessions, ratings, results against the computer, puzzle streak, friendships, requests, blocks and pending links immediately and revokes Sign in with Apple. Running games are cancelled. Finished games stay in your opponents’ history but are no longer linked to you; they then show “Deleted player”.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. To exercise them, contact us at the address above. You also have the right to lodge a complaint with a data protection supervisory authority.

Children

Rollmate is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes

We update this policy when the app or our processing changes. The current version is always available at rollmate.elbe.games/privacy.