From the game box · Fine print

Privacy Policy

Last updated: August 11, 2026 · Effective: August 11, 2026 · Version 1.1

1Who we are

Dice Football Club (at dicefootball.club / dicefootball.netlify.app and in any app store where we publish it; also presented in-game under the “Gridiron Roll” moniker) is operated by DataAutomation.ai, LLC ("we," "us"). For anything about your data, write to support@dicefootball.club. Under the GDPR, DataAutomation.ai, LLC is the data controller for the personal data described here.

2Playing without an account

The free game is complete and fully playable anonymously. When you play without signing in:

• We collect no personal data. There is no account, no identifier we create for you, and no profile.
• Your game saves, seasons, settings, and game logs are stored only on your device (browser localStorage on the web; on-device storage in the native app). They are never uploaded to our servers, and we cannot see them.

Signing in is never required to play the free game. It lets a coach maintain a club profile and carry Big League access or purchases across devices.

3What we collect when you create an account

If you choose to sign in, we store the following in your profile:

• Email address and authentication records — used for password sign-in, verification, magic links, password resets, security notices, and tying purchases to the correct account. If you choose a password, Supabase stores its one-way password hash; neither Dice Football Club nor DataAutomation.ai, LLC can see your password.
• Google sign-in data (only if you choose Google) — Google provides an account identifier, email address, email-verification state, and basic profile information such as name and profile image. We use it only to create or sign in to your Dice Football Club account, display your account identity, prevent duplicate accounts, and protect the service. We do not use Google data for advertising, profiling, or unrelated purposes.
• Club profile — a display name or username, a general location if you choose to add one, games played, and account dates.
• Phone number (optional) — only if you choose to provide one for text messages. See section 5.
• Favorite team choice (optional) — cosmetic.
• Security and operational records — account creation and last-sign-in dates plus limited IP address, browser, device, and delivery logs processed by our hosting, authentication, and email providers to prevent abuse and diagnose failures.

We do not request your street address, birthday, contacts, microphone, or precise device location. A Google profile name may be a real name; you can choose a separate club username in the Game.

Google API Limited Use. Dice Football Club's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

4Purchases and subscriptions

Payments on the web are processed by Stripe, Inc. Your card number and full payment details go directly to Stripe and never touch our servers. What we store on our side is the purchase record: which product you own (for example, the Deluxe Box or a subscription), its status and expiry, when it was granted, and Stripe's reference IDs for the transaction — kept so we can honor your purchase, restore it on a new device, and resolve refunds or billing disputes.

On iOS (when the App Store version launches), purchases will be processed by Apple through in-app purchase, under Apple's own payment terms; we will store the equivalent purchase record.

Stripe's handling of your payment data is described in Stripe's privacy policy.

5Text messages (only if you opt in)

If you give us a phone number and opt in to text messages, we keep a consent ledger — a record of when you opted in or out, the exact consent wording you saw, and the IP address and browser signature at the moment of consent. We keep this because the law that governs text messaging (TCPA) requires us to be able to prove consent.

• Marketing texts are capped at no more than one per 30 days.
• Reply STOP at any time to opt out; reply HELP for help. Opt-out is honored immediately.
• Never providing a phone number costs you nothing — no feature of the game requires one.

6What we do not collect or do

• No advertising, and no advertising identifiers.
• No third-party behavioral analytics or tracking SDKs. There is no Google Analytics, Meta pixel, session recorder, or similar in the app.
• No sale or cross-context behavioral advertising. We do not sell personal data or "share" it for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA. Service providers receive only the data required to perform the jobs listed below.
• No microphone use. The game's voices and crowd sounds are pre-recorded audio we ship; the app never listens.
• No location collection.
• No profiling or automated decision-making with legal or similarly significant effects.

7Cookies and local storage

We use only functional storage — no advertising or analytics cookies:

• Session storage — if you sign in, your sign-in session token is kept in your browser's local storage so you stay signed in.
• Game saves — your saves, seasons, logs, and settings, on your device as described in section 2.

Because none of this storage is used for advertising or cross-site tracking, there is no cookie consent banner to click through — there is nothing to consent to beyond what makes the game work.

8Why we may lawfully use this data (GDPR lawful bases)

• Performance of a contract — your email, display name, and purchase records: we need them to provide the account and honor the purchase you made.
• Consent — your phone number and text messages. You can withdraw consent at any time (reply STOP or remove the number).
• Legal obligation and legitimate interest — the SMS consent ledger and payment-event records, kept to comply with messaging and financial law and to prevent fraud and duplicate charges.

9Service providers and international transfers

We use Netlify to deliver the web game, Supabase for account authentication and account data, Mailgun for verification and password-reset email, Stripe for web payments, and Apple for App Store purchases when the iOS version launches. If you separately opt in to text messages, ClickSend processes the phone number and message-delivery data. Google processes Google sign-in under Google's own privacy terms.

These providers act as processors or independent service providers for the narrow purposes described here. Their systems may process data in the United States. If you use the service from outside the U.S. — including the EU/EEA or UK — your account data may be transferred to the U.S. under the providers' applicable data-processing terms and transfer safeguards.

10How long we keep it

• Account and profile data — for as long as your account exists. Deleted when you delete your account, subject to the exceptions below.
• Authentication and email security logs — retained for the limited operational and anti-abuse periods set by Supabase and Mailgun.
• Purchase records — retained as long as needed to honor the purchase and as required by tax and financial-records law, even after account deletion (in a form no longer tied to a live account).
• SMS consent ledger — retained as a legal record of consent for as long as messaging law requires, including after opt-out or account deletion.
• On-device saves — under your control entirely; clearing your browser data or deleting the app removes them.

11Your rights: see it, take it, delete it

You do not need to cite a statute. Ask, and we do it.

• Access & export — from inside the game (Settings → Account) you can view and export a copy of everything we hold about you.
• Delete — the same in-app function deletes your account and its data, subject only to the legally required records in section 10. You may also use our account-deletion instructions or email support@dicefootball.club.
• Correct — you can change your display name and details in the app, or ask us.

If you are in the EU/EEA or UK, these are your GDPR rights of access, portability, rectification, erasure, restriction, and objection; you may also lodge a complaint with your local supervisory authority. If you are a California resident, these are your CCPA rights to know, delete, and correct — and because we do not sell or share personal data, there is nothing to opt out of. We will never treat you differently for exercising any right.

12Children

Dice Football Club is a family-friendly game and children are welcome to play the anonymous free game. Accounts are for players 13 and older; we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email support@dicefootball.club and we will delete it.

13Changes to this policy

When we change this policy we will update the "Last updated" date and version number at the top, and keep this URL stable. For a material change — anything that expands what we collect or how we use it — we will give notice in the game before it takes effect. We will never retroactively apply a broader policy to data collected under a narrower one.

14Contact

DataAutomation.ai, LLC
support@dicefootball.club
Dice Football Club Support