Privacy Policy

1. Who we are

Naughty & Dice Games (“we,” “us”) runs naughtydice.com, a website of party games for adult couples. The site is operated by David Merschbrock, doing business as Naughty & Dice Games, in the United States. This policy explains what information we handle when you use the site and its games (the “Service”), and the choices you have.

Questions or requests? Email us at iwdbrandingkc@gmail.com.

2. Information we collect

If you just play (no account)

We don't ask for any personal information. The games run in your browser. Settings and game progress are saved in your browser's local storage on your own device (see section 4), not on our servers.

If you create an account

Live scoreboard (anonymous game results)

Our live scoreboard (with a short version on the homepage) shows games played today and this week, recent results, and a “Top couples” board of nicknames from the last 30 days. To build it, when a game ends the phone that started it sends one anonymous result to our server:

• What is sent: the game, whether you played on one phone or two, the game length setting, whether it was a win, draw, or ended early, whether Her or Him won, the score and how the game ended (for example, pairs won, ships left, shots and hits, or the number of moves and “checkmate”), how many minutes you played, and when it ended (rounded to the minute). A random game ID, made fresh for each game, stops the same game being counted twice.
• Couple nickname (optional): if you type one, it is shown publicly on the scoreboard with your results. Please don't use real names. Nicknames that are offensive, or contain links, social-media handles, or long numbers (like phone numbers), are not shown.
• What is never sent or stored: your names, the prompts, dares, or acts you play, your actual moves, or your email or account. Results are not linked to accounts, and the scoreboard does not store IP addresses.
• Anti-spam: to limit how many results one device can send, we keep a short scrambled code made from your IP address with a secret key that changes every day. The code can't be turned back into your IP address and is deleted after about 24 hours.
• How long: results are deleted automatically after 90 days.
• Turning it off: it is on by default. Untick “Add our results to the live scoreboard” on any game's setup screen, or “Share results from this device” on the scoreboard page, and nothing is sent. The setting is saved on your device.

Game suggestions

Our Suggest a game form sends us your game idea and, if you choose to fill them in, a description, a nickname, and an email address. They arrive as an email to our own mailbox and are not stored in our database or shown on the site. We use your email only to reply to you about your suggestion, never for marketing, and we don't add it to any list. We may use or adapt the ideas we receive (see our Terms of Use). To ask us to delete a suggestion, email us.

Security records

To stop password guessing and spam sign-ups, we briefly record the IP address, the email entered, and the time of failed sign-ins, new sign-ups, password-reset requests, and game suggestions (for suggestions, just the IP address and time). These records are deleted automatically after about 24 hours. Password-reset links are stored only in hashed form and expire after 1 hour or once used.

Server logs

Like nearly every website, our hosting provider (DreamHost) keeps standard web server logs, such as IP address, browser type, the page requested, and the time. These are used to keep the site running and secure, and are kept according to the host's normal log retention.

What we don't collect

• We don't use advertising, analytics, or social-media tracking tools.
• We don't receive your game prompts, moves, dares, or what you choose to do.
• We don't collect payment information. Donations are handled by Patreon (see section 5).
• The site has no photo, video, or file uploads.
• We don't knowingly collect information from anyone under 18.

3. How we use information

We use the information above only to:

• run your account (sign-in, favorites, display name, password changes and resets, and Patreon supporter perks if you connect Patreon);
• show the anonymous live scoreboard on our site;
• keep the Service secure and prevent abuse;
• answer you when you contact us or ask for a reply to a game suggestion; and
• meet legal obligations.

We don't send marketing email. The only emails we send are ones you trigger, such as a password-reset link. We don't use your information for automated decisions or profiling.

4. Cookies and local storage

We use only what the site needs to work. There are no third-party or advertising cookies.

Because these are essential to the site working, they don't require a consent banner under most laws. You can clear them anytime in your browser settings. Clearing them signs you out and resets saved games.

5. Third-party services

Two-phone play (PeerJS / WebRTC)

When you link two phones with a room code, the games connect the phones directly using WebRTC, a standard browser technology. To set up that connection, your browser briefly contacts the free public PeerJS connection server (operated by the PeerJS open-source project), and may use public STUN/TURN network servers (such as those run by Google and the PeerJS project). These services can see your IP address and a random room ID. They are not run by us and have their own policies.

Once connected, game data travels between the two phones over an encrypted WebRTC connection, sometimes through a relay server if a direct connection isn't possible. We don't receive or store it. Playing on one phone doesn't use these services at all.

Patreon

If you choose to support us, you do so on Patreon's website. Patreon handles your account and payment under its own privacy policy. We may see what Patreon shares with creators, such as your Patreon name, email, and pledge level, and use it only to manage supporter perks and contact supporters about them.

Connecting Patreon to your account (optional)

If you click “Connect Patreon” on your account page, Patreon asks your permission and then shares with us your Patreon user ID, your name on Patreon, and your membership in our campaign (status, tier, and pledge amount). We don't receive your email from Patreon or any payment details. We store those details plus an encrypted Patreon “refresh token” that lets us re-check your membership about once a day, so early-access perks start and stop with your pledge. Patreon may also notify us when you change your pledge. You can disconnect at any time on your account page (which deletes these details) or revoke our access in your Patreon settings.

Hosting and email

The site is hosted by DreamHost in the United States, and account emails are sent through DreamHost's mail servers. They process data on our behalf to provide those services.

6. When we share information

We don't sell, rent, or trade personal information, and we don't “share” it for targeted advertising. We disclose it only:

• to service providers that help us run the site (like our host), under their obligations to protect it;
• if required by law, such as a valid subpoena or court order, or to protect the safety, rights, or property of anyone; or
• as part of a sale, merger, or transfer of the Service, in which case this policy continues to apply to your information.

7. How long we keep it

• Account data: until you delete your account. Deleting it removes your email, password hash, display name, and favorites from our database immediately.
• Security records: about 24 hours.
• Game suggestions: kept in our mailbox only as long as we're considering the idea, and deleted on request.
• Live scoreboard results: 90 days. The anti-spam code: about 24 hours.
• Password-reset links: 1 hour, or until used.
• Patreon connection: until you disconnect Patreon or delete your account.
• Backups and server logs: copies may remain in our host's routine backups and logs for a limited time before they're overwritten.

8. Your choices and rights

• See or change your data: your email, display name, and favorites are on your account page. You can change your display name and password there.
• Delete your data: use Delete account on your account page. It's instant and permanent.
• Can't sign in? Use “Forgot password?” or email iwdbrandingkc@gmail.com from the address on the account and we'll help, including deleting the account for you. We may ask you to confirm you own the address.
• Copy of your data: email us and we'll send you what we hold about you.

Depending on where you live (for example California, Colorado, Virginia, or other US states, or the EU/UK), you may have legal rights to access, correct, delete, or get a copy of your personal information, and to not be discriminated against for using these rights. We honor these requests for everyone, wherever you live. We respond within the time the law requires (usually 30–45 days). You can also have an authorized agent contact us for you. We don't sell or share personal information, so there is nothing to opt out of. If you are not satisfied with our answer, you can contact your local data protection authority.

9. Adults only (no children)

The Service is only for adults 18 or older (or the age of majority where you live, if higher). We don't knowingly collect information from anyone under 18. If you believe a minor has created an account or given us information, email iwdbrandingkc@gmail.com and we will delete it.

10. Security

We protect your information with HTTPS encryption, one-way password hashing, secure HTTP-only cookies, rate limits on sign-in attempts, and a database kept outside the public website folder. No system is perfectly secure, so please use a unique password. If we ever learn of a breach affecting your information, we will notify you as required by law.

11. Visitors outside the United States

The Service is run from the United States, and your information is stored and processed there. Where the law requires a legal basis, we process account data to provide the Service you asked for (contract), and security records based on our legitimate interest in keeping the site safe.

12. Changes to this policy

If we change this policy, we'll update the date at the top of this page. If a change is significant, we'll also post a notice on the site or email account holders before it takes effect.

13. Contact us

Email: iwdbrandingkc@gmail.com
David Merschbrock, doing business as Naughty & Dice Games