Roll a D20 / Legal
Privacy policy
Privacy, kept simple. This page explains what information rollad20.co handles when you visit the site, roll the dice or email us.
Summary
- There are no accounts, contact forms, analytics, advertising or tracking scripts.
- Rolls are calculated in your browser. Roll history stays in the page’s memory and is never sent to us.
- Our web server keeps technical access logs. Archives are retained for up to 10 days; the active log rotates by size and can contain older entries.
- One cookie can remember preferences you explicitly save in Cookie settings. No choice is requested on arrival because no optional tracking services are in use.
- If you email us, we use your message only to reply.
Who is responsible
The operator of rollad20.co is responsible for the personal information described on this page. You can reach us at contact@rollad20.co or through the contact page.
Information we collect
Server logs
When your browser requests a page, our web server records the IP address, date and time, requested address, response status, referring page and browser user agent. Error logs can also include the IP address of a request that failed.
Rolls and roll history
Dice results, modifiers and roll history are processed only in your browser. The roller does not send them to our server, write them to browser storage or save them in cookies. Clear history removes the history list; the current result and modifier stay visible. Reloading or closing the page clears the dice data held in page memory. If you copy a result, the copy follows your device’s clipboard settings. Download CSV saves the current history to a file on your device. Clearing history or leaving the page does not delete a downloaded file; remove that file using your device’s file manager.
Your cookie choice
When you accept, reject or save cookie preferences, a first-party cookie named rd20_consent stores that choice in your browser. It contains your choices and the date, and nothing that identifies you. The cookie policy has the details.
Emails you send
If you email us, we receive your email address, your message and any information you choose to include.
Why we use it
- Server logs: to deliver pages, keep the site secure, prevent abuse and fix errors.
- Cookie choice: to remember and respect your decision.
- Emails: to reply and to follow up on your request.
Where data protection laws such as the UK or EU GDPR apply, we rely on our legitimate interests in running a secure website and answering messages, and on the need to store your cookie choice in order to respect it. We do not sell personal information, use it for advertising or build profiles.
Service providers
- The site runs on a virtual private server that stores the technical logs described here.
- Namecheap provides the email forwarding service that delivers messages sent to contact@rollad20.co to our mailbox.
Fonts, images and scripts are served from rollad20.co itself, so loading a page does not contact any other company. We don’t embed videos, maps, social media widgets or third-party scripts.
Analytics, advertising and cookies
The site uses no analytics, advertising or tracking tools. If we ever add them, they will load only after you opt in through the cookie settings, and this policy and the cookie policy will be updated first.
How long we keep information
- Access logs: rotated when they reach 10 MB, with archives retained for up to 10 days. The active file can contain older entries until it rotates.
- Error logs: rotated by size. The current server configuration does not establish a fixed deletion date for every error-log entry.
- Cookie choice: stored in your browser for 180 days, or until you delete it.
- Emails: kept only as long as needed to deal with your request and any follow-up, then deleted.
Security
The site is served only over HTTPS, with strict transport security and a content security policy that allows scripts only from rollad20.co. No method of transmission or storage is completely secure, but we keep the information we hold to a minimum.
Your rights
Depending on where you live, you may have the right to access, correct or delete personal information about you, to object to or restrict how it is used, and to receive a copy of it. To make a request, email contact@rollad20.co. We may need to ask for details that help us find the information, such as the date you emailed us.
If you are unhappy with how we handle your information, you can complain to your local data protection authority, for example the Information Commissioner’s Office in the UK.
Children
The site has no accounts or contact forms and does not knowingly collect personal information from children beyond the technical server logs described above.
Changes to this policy
We will update this page before changing how the site handles personal information. The date at the top shows when it last changed.