Privacy Policy

1. Information we collect and where it comes from

Account and profile information. We collect your email address, account identifier, display name, sign-in method, account creation date, and preferences. If you use a password, we process it for authentication and store a password hash. You may also provide a profile image and a separate contact email. If you choose Google sign-in, Google provides your verified email address and name. That sign-in flow requests basic identity information, not access to your Gmail messages or Google Drive files.

Tracker and bonus information. We collect the casinos you save, claim times and amounts you report, balances you enter, custom timers, hidden or removed casinos, Roll Call progress, bonus reports, and alert preferences. Bonus reports may be associated with an account-derived identifier and used to calculate shared casino statistics and expected-value estimates.

Community content and communications. We collect posts, comments, reactions, attached media or links, direct messages, feedback, support correspondence, and other information you choose to submit. Messages include participant information, delivery and read status, and timestamps.

Notification information. If you enable browser push notifications, we collect the subscription endpoint and delivery keys, the associated account, your selected alerts and casinos, the device time zone, reminder and quiet-hour settings, and notification delivery or interaction records.

Usage and technical information. We and our providers process page addresses, visits, clicks, navigation, browser and device details, IP addresses, approximate location derived from an IP address, timestamps, and error or diagnostic information. Some activity is linked to your signed-in account. Feedback can include the page you were using, browser details, screen dimensions, and submission time.

Referral information. We collect referral sources, campaign parameters, and invite codes to understand how people find DailyRoll. A referral source may be saved to your account when you register. Invite features may show an inviter the number of registrations attributed to their code.

AI submissions. If you use a live AI feature, we process the text, images, and related context submitted to that feature. Section 6 explains when this information is sent to an AI provider.

These sources include information you provide directly, information generated when you use the service, your browser or device, and the sign-in and other providers described in this policy. Please do not include casino credentials, government identification numbers, banking details, or other sensitive information in community content, feedback, messages, or AI submissions.

2. How we use information

We use information to create and authenticate accounts; save and synchronize your tracker and preferences; calculate timers and casino statistics; operate community and messaging features; deliver the alerts you enable; respond to feedback and support requests; understand referrals and product usage; diagnose errors; and detect misuse and protect the service.

Signed-in actions, such as page visits, claims, balance edits, posts, and notification changes, may be recorded in administrative activity logs. These records help us operate and troubleshoot DailyRoll and understand whether its features are working.

We also use information when necessary to handle privacy requests, comply with applicable legal obligations, or establish, exercise, or defend legal claims.

3. What other users can see

Your display name, profile image, posts, comments, media, and visible community activity can be seen by other users where those features are available. Choose a display name and image you are comfortable sharing. If you put an email address or other personal information in your content, it will be visible with that content.

The community and messaging interfaces are designed to show public profile identifiers rather than disclose your sign-in email address to other users. Direct messages are delivered to their conversation participants and stored by DailyRoll. They are not end-to-end encrypted. Administrators with access to the systems may access stored information for operation, support, moderation, or security.

Your tracker information is associated with your account. It can also be processed by our infrastructure and analytics providers as described below. Community content may be copied or shared by its viewers; removing it from DailyRoll cannot remove copies already held by others.

4. Analytics and session replay

PostHog. When configured, we use PostHog for product analytics and session replay. It can collect visits, clicks, navigation, device and browser information, approximate location, and a reconstruction of the page displayed in your browser. When you sign in, we send your email address and display name to PostHog so analytics and replays can be associated with your account. These analytics and replays can identify your account.

Replay is configured to mask input fields. That setting does not mask all information displayed elsewhere on a page. Visible balances, rendered messages, posts, feedback, and other page text may appear in a replay. Input masking also does not prevent information submitted to DailyRoll from being stored or used to provide the feature you requested.

Vercel Web Analytics. We use Vercel Web Analytics when enabled to understand traffic, page views, referral sources, device and browser types, and approximate visitor location. Its standard reporting uses aggregated traffic information and does not use third-party cookies. This is separate from PostHog and our account-linked activity logs.

Signing out resets the PostHog identity used for subsequent activity on that browser. It does not erase previously collected analytics or stop all analytics collection. DailyRoll currently does not provide a dedicated in-app analytics opt-out switch. Browser privacy tools may limit some collection, but clearing cookies alone may not prevent analytics requests.

5. Cookies and data saved in your browser

We use cookies and browser storage for sign-in, referral attribution, saved preferences, cached tracker information, claimed-drop status, and Roll Call progress. Some information is stored on your device; other information is synchronized to your account.

Our sign-in cookie lasts up to 30 days. Google sign-in uses temporary cookies lasting up to 10 minutes to complete and protect the sign-in flow. Our referral-source cookie lasts up to 30 days. PostHog may use cookies or local storage to recognize visits and associate activity. Locally saved preferences and progress may remain until cleared or replaced.

You can restrict cookies and clear site data through your browser settings. Doing so may sign you out or remove locally saved preferences and progress. It does not delete server-side account records or information already sent to providers.

DailyRoll does not currently implement its own automatic collection controls in response to a browser's Do Not Track signal. A provider may apply its own settings. Global Privacy Control is a separate browser signal for certain privacy opt-outs. DailyRoll currently has no dedicated app-level control that automatically changes collection in response to that signal. You can contact us about applicable privacy opt-outs using the request process in section 12.

6. AI features

When a feature makes a live request to Google Gemini, the submitted text or image and any accompanying casino context are sent to Google to generate the response. A built-in fallback response does not require sending that request to Gemini. We also maintain usage counters and limits associated with an account or an IP-derived identifier to protect the service and manage AI usage.

Google's treatment of prompts and responses depends on the service and account configuration. For unpaid Gemini services, Google may use submissions and responses to improve its products and machine learning technologies, and human reviewers may review them. Paid services have different data-use terms. Do not submit personal, sensitive, or confidential information to the AI assistant. Using an AI feature does not make its submissions private from the provider.

Google's current Gemini API terms are available at https://ai.google.dev/gemini-api/terms. DailyRoll does not promise that AI submissions are excluded from provider model improvement or human review.

7. Providers and other disclosures

We disclose information to providers to operate the features described in this policy. Which providers receive information depends on the features you use and the integrations enabled for DailyRoll.

• Vercel hosts DailyRoll, handles website requests and related technical information, and provides web analytics.
• Upstash provides Redis storage for accounts, tracker records, community content, messages, feedback, and operational records in deployed environments.
• PostHog processes product analytics, account identification information, and session replays as described in section 4.
• Google provides optional Google sign-in and processes live Gemini requests as described in sections 1 and 6.
• Resend processes recipient addresses and message content for sign-in emails and support or feedback replies when email delivery is configured.
• Browser and device push services process subscription and delivery information to deliver notifications to your browser or device.
• Discord may receive feedback notifications in our configured support channel, including a feedback preview, the sender's name and email when available, and related page and device details.

We may also disclose information when required by law or valid legal process, or when necessary to investigate abuse, protect rights or safety, or resolve legal claims. If DailyRoll undergoes a merger, acquisition, financing, or transfer of its business or assets, information may be disclosed as part of that process, subject to applicable law and any required notice.

8. Notifications and email

Browser push notifications require permission from your browser or device. DailyRoll also uses your alert preferences, selected casinos, time zone, and timing settings to determine which notifications to send. You can change available settings in the app and revoke notification permission in your browser or device settings.

Revoking browser permission prevents delivery to that browser but does not necessarily remove every previously saved subscription or delivery record from our systems. Contact us if you want those records reviewed for deletion. Notifications may be visible on your device's lock screen depending on its settings.

We may send occasional product and bonus update emails. You can unsubscribe from these communications at any time using the one-click unsubscribe link included in every update email.

Sign-in emails and replies to feedback or support requests are sent to provide those services. Turning off push notifications does not stop emails you request to sign in or receive support.

9. Outside websites and affiliate links

Casino sites, linked content, and other outside services operate independently of DailyRoll. Their operators collect and use information under their own policies. An outside site receives technical information when you visit it and may use cookies or other tracking technologies.

Some directory links may be affiliate or partner links. They may contain referral identifiers that allow a partner or affiliate network to attribute a visit, registration, or other qualifying action to DailyRoll. DailyRoll may earn compensation from qualifying activity. This does not mean your DailyRoll tracker is connected to that site's account.

When you follow a partner link, DailyRoll counts the click for that casino and day. The count is not linked to your DailyRoll account.

10. How long we retain information

Retention depends on the record, how the feature is used, and applicable legal requirements.

Account, tracker, community, and bonus-report records generally remain until removed; they do not all have a fixed automatic expiration. Direct-message content and conversation summaries are configured to expire 180 days after the latest message in that conversation. A new message restarts that period. Related conversation indexes and counters may remain longer.

New feedback records are initially configured to expire after 180 days. Subsequent administrative updates or responses may retain them longer. Copies sent to email or Discord are subject to those systems' retention and are not removed automatically when a feedback record expires.

Activity feeds keep a limited number of recent entries. Account-linked summary counters can remain longer. Analytics, session replays, hosting logs, and provider-held records follow their respective configuration and retention settings. Expiration of a browser cookie does not automatically delete information stored on our servers.

We may retain information where needed for a lawful purpose, such as handling an unresolved support matter, preventing abuse, or meeting a legal obligation. Privacy requests are reviewed separately from the automatic expiration settings above.

11. Account removal and deletion requests

To request account removal or deletion of personal information, email dailyrollapp@gmail.com. Account removal is currently handled by an administrator rather than a self-service deletion control.

The current account-removal process deletes the account profile, saved casino list and tracker state, Roll Call state, sign-in sessions and links, account notification history, and associated push subscriptions. It does not automatically delete community posts or comments, bonus reports, direct messages, feedback, separate activity records, provider-held analytics or replays, or data saved in your browser.

If you request deletion of personal information, we review these additional records and relevant providers as well, and act as required by applicable law. Account removal is not treated as completion of every broader personal-information deletion request. Any information retained under a legal exception is subject to that exception. You can clear local site data in your browser separately.

12. Your choices and privacy rights

You can edit available profile and notification settings, manage browser permissions, clear locally saved data, and use available controls to edit or remove your own community content.

You may contact us to request access to, correction of, or deletion of your personal information. Depending on your location and which laws apply to DailyRoll, you may also have rights to obtain a portable copy, object to or restrict processing, withdraw consent for consent-based processing, opt out of sale, sharing, or targeted advertising, limit certain uses of sensitive information, or appeal a decision about your request. These rights can be subject to exceptions and legal eligibility requirements. Where applicable, you may use an authorized agent and complain to your privacy regulator. We will not unlawfully discriminate against you for exercising a privacy right.

Send requests to dailyrollapp@gmail.com and describe what you would like us to do. For account-specific access, correction, or deletion, include the email associated with your account. We may ask for information reasonably needed to verify your identity or an agent's authority before disclosing or changing account information. Verification requirements differ for opt-out requests. Do not send passwords, casino credentials, or banking details.

We respond within the time required by applicable law and explain any refusal, applicable exception, or available appeal process. To request review of a denied request, reply to our response or email the same address and ask for an appeal.

13. Security and processing locations

We use safeguards including authentication, access controls, password hashing, and protected session cookies. These measures do not make data transmission or storage completely secure. Direct messages are not end-to-end encrypted, and our analytics disclosures describe how displayed information can be processed by a replay provider.

We and our providers may process information in the United States and other countries where our services operate. Those countries may have different privacy laws from your location. Contact us with questions about processing locations or safeguards. This policy does not waive protections that applicable law gives you.

14. Adults and children

DailyRoll is intended for adults of legal age for the services they use: generally 21 or older, or 18 or older where permitted. It is not intended for children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact dailyrollapp@gmail.com so we can investigate and take appropriate action, including deletion where required.

15. Changes and contact

We may update this policy as DailyRoll or its information practices change. We will post the revised policy and update its effective date. For material changes, we will provide additional notice when required by law and obtain consent where required before applying a new use of information. Continued use alone does not replace consent required by law.

For questions about this policy or to exercise a privacy right, contact DailyRoll at dailyrollapp@gmail.com.