Privacy policy

Who we are

Roll for Wonder is run by Roll for Wonder, Bulevar Mihajla Pupina 89, 11070 Belgrade, Serbia. We are the controller of the personal data described here.

Questions about privacy go to [email protected]. We answer within 30 days, and sooner when we can.

This website

This website sets no cookies for advertising. Besides the cookies it needs to work, such as keeping you signed in or completing a payment, it uses Google Analytics, which counts which pages people read. A bar on your first visit tells you so. Google sets its cookies and receives the pages you view, your type of device and browser, and your approximate country, and keeps that for at most 14 months. It is never used for advertising, and you can turn it off any time under “Cookie settings” at the bottom of every page; that also removes its cookies. The game itself doesn't use Google Analytics.

The site's fonts and pictures are served from our own server, so visiting it doesn't send your address to other companies.

Like every web server, ours records each request in a log: your IP address, the page, the time and your browser's description of itself. We use these logs only to find faults and stop abuse.

Accounts and purchases

A parent creates an account with an email address and signs in with a link we send to it. Children don't have accounts of their own.

Payments are handled by Paddle, who sells to you on our behalf as the merchant of record. Paddle collects your payment details, country and tax information under its own privacy notice; we never see your card number. We receive what you bought, the price, and your email.

Playing an adventure

To tell a story the game needs to know a few things, and it saves them with the adventure so you can continue another evening:

• the name or nickname the story calls your table, and an age range (for example 6–8), which sets how gentle the story is;
• the settings you chose: language, challenge and the look of the pictures;
• every choice made and everything typed, and the story the game wrote back.

What your child chooses or types is sent to Anthropic, our AI provider, so the storyteller can write the reply. Under Anthropic's commercial terms, what we send through their service isn't used to train their models. Pictures are drawn by OpenAI from descriptions of each scene; the name your table uses is never part of those descriptions.

If you press “something doesn't look right” in the game, we save that moment: what was on screen, the adventure so far, and the note you wrote. We use it only to fix the problem.

The legal basis is our contract with you, the parent, to provide the game you bought, and your consent for your child's use of it.

Children

Roll for Wonder is made for children aged 6 to 12, played with or set up by a parent. Accounts and purchases are for adults only. We don't knowingly collect personal information from a child except through a parent's account and with the parent's consent.

What we collect from a child is only what the game needs: a nickname, an age range, and what happens in their adventures, including what they type. We don't ask a child for their full name, photo, location, school or contact details, and the game never asks a child to share them. If a child types something like that anyway, it's treated like the rest of the adventure and deleted with it.

Parental consent (COPPA). If you are in the United States and your child is under 13, the Children's Online Privacy Protection Act applies. A child can only play through an account a parent has paid for, and the purchase is made with a payment method that notifies the account holder of the transaction. We treat that purchase, together with your agreement to this policy at checkout, as your verifiable consent to collect your child's information as described here.

Your rights as a parent. You can review the information we hold about your child, ask us to delete it, and refuse to let us collect any more of it, at any time, by writing to [email protected] from the email on your account. Refusing further collection means your child can no longer play, because the game can't tell a story without what they type.

Designed for children. In line with the UK Age Appropriate Design Code and similar rules, the game has no chat with other people, no advertising, no location data, no profiling of children for marketing, and nothing that pushes a child to play longer or spend money. Settings are the most protective ones by default.

Who helps us

These companies process data for us under contracts that only let them use it to provide their service to us:

Where your data is

Our servers and database are in Finland, in the European Union. When data goes to a provider outside the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's Standard Contractual Clauses. Transfers to the United Kingdom are covered by the UK adequacy decision.

We protect data with encrypted connections, a database that isn't reachable from the internet, and access limited to the people who run the service.

Your rights

You can ask us to show you the data we hold about you or your child, correct it, delete it, or give it to you in a file you can take elsewhere. You can object to how we use it and withdraw consent at any time, which doesn't affect what we did before. Californian residents have the same rights under the CCPA, and we don't sell or share personal information as that law defines it.

Write to [email protected]. If you think we've handled your data wrongly, you can also complain to the data protection authority where you live.

Changes

When this policy changes we update the date at the top. If a change affects how we use data you've already given us, we'll tell you by email before it takes effect.