Privacy

What is stored

Your email address, because signing in is a link sent to it. There is no password to store. Your Username, which you choose and which is public. Your rolls: six face values a day, the badges they matched, and the score they earned. Nothing else. There are no avatars, no uploads, and nowhere in Raredle to write free text except your Username.

Your email never leaves the authentication system and is never copied into the game's own tables, so no page and no query in Raredle can reach it.

Where it lives

In the European Union. The database runs in AWS eu-central-1, Frankfurt, so your email address and account record are stored in the EU. The application itself is served from edge locations worldwide, but the data sits in Frankfurt.

Sharing a roll makes your past rolls recomputable

This is the unusual one. Read it before you share anything.

Raredle's dice are provably fair: each day's faces are derived from that day's secret and your player id, and once a day is over its secret is published so anybody can check the maths. A roll's public page publishes your player id so that check is possible.

So anyone holding a link to one of your rolls can recompute your faces for every closed day in Raredle's history, including days you never claimed. They cannot learn your email, your address or anything else, and they cannot compute anything about today until today is over. We chose this deliberately, because a fairness check only you could run would prove nothing to anyone else. The algorithm is published in full.

Sign-in records, and leaderboard farming

The authentication system records the IP address and browser user agent of each sign-in session. We may inspect those records to detect leaderboard farming, meaning one person running many accounts. We do not use them for advertising, we do not sell them, and we do not build profiles from them.

Raredle sets two cookies of its own and no third-party cookies. One holds your session. The other holds a visitor identifier, so that a stranger who rolls without an account sees the same roll if they reload.

Counting visits

One third-party script runs on the site: Vercel Web Analytics, which counts page views. It sets no cookies, and it does not follow you from here to anywhere else.

It is told the kind of page you are on rather than the address of it. An invite link is counted as "/i/[token]", a shared roll as "/r/[code]", and a profile as "/u/[username]". The invite token, the roll code and the username are removed before anything is sent, so the link somebody gave you is never handed on. There is no advertising script anywhere on the site.

Deleting your account

Deleting your account removes your email address and your login. Three things then happen to what is left:

• Your rolls stay, with their scores and their place in past Leaderboards, attributed to "a deleted player" rather than to you. History persists; live relationships do not.
• Your follows are dropped, in both directions.
• Your Username is removed, and a peppered hash of it is kept forever. This is a deliberate exception to erasure. The hash cannot be read back into your name; its only purpose is to make sure nobody else is ever given that name. Otherwise every old link and message pointing at it would start resolving to a different person with no sign that anything changed. The cost is that returning later, you cannot reclaim your own name.

Your rights

Under the GDPR you may ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted, subject to the Username exception above. Raredle holds so little that a copy is short: your email, your Username, and your rolls.