Privacy Policy

Last updated: 1 October 2026

Who we are

"Royal Game of Ur", "we" and "us" mean the operator of royalgameofur.app. You can reach us at potentcapital@gmail.com.

What stays on your device

Playing against the computer, playing on one screen, the tutorial, and watching AI games need no account and send nothing about you to our servers. To work, the site saves the following in your browser's local storage:

• your settings (theme, board orientation, sound, hints and similar)
• your current unfinished game, so you can continue it
• your finished games and their replays, and your local statistics
• your tutorial progress, daily-challenge answers and which achievements you have seen
• your equipped and unlocked cosmetics
• for online play, your last player name and any unfinished online game, so you can rejoin it

This data never leaves your browser unless you export it or share a game. A share link contains that game's dice throws and moves (nothing else) inside the link itself; we do not store it. Clearing your browser's site data deletes it. We do not use advertising or cross-site tracking cookies.

Online play and accounts

Online rooms, matchmaking and the ladder need a player profile. You can play as a guest (an anonymous account is created automatically) or register with an email address and password. For online play our server stores:

• an account identifier, and your email address if you register (passwords are handled by our authentication provider and are not readable by us)
• a player name (generated for guests, shown to opponents and on the ladder)
• your games: who played, the dice throws and moves, timestamps and the result
• your rating, number of games played, and matchmaking queue entries
• cosmetic purchases you have made (what you own, when, and a payment reference)

Online data is hosted with Supabase (database and authentication) in the European Union (Frankfurt). Other players can see your player name, rating and game results; they cannot see your email.

Analytics

We use Vercel Web Analytics to understand how the site is used. It records page views and a few anonymous product events (for example: a game started or finished, which mode and difficulty, a rough duration bucket, that the Store or Donate button was opened). It does not use cookies to track you across sites and we do not link these events to your name or email.

Payments

Purchases and donations are handled by Dodo Payments, which acts as the merchant of record. You enter your card or wallet details on Dodo's checkout page, never on ours. We do not receive or store your card number. Dodo tells us that a payment succeeded so that we can unlock your cosmetics. Dodo's own privacy policy governs the information you give them.

What we do not do

• We do not show ads.
• We do not sell or rent your personal information.
• We do not build advertising profiles or share data with data brokers.

Service providers

We rely on: Vercel (hosting and analytics), Supabase (online database and authentication), and Dodo Payments (payments). They process data only to provide those services to us.

How long we keep data

Online game records and ratings are kept while your account exists. Purchase records are kept as long as needed to honour your purchase and for accounting and legal obligations. Analytics events are kept for the period set by our analytics provider.

Your choices and rights

• To delete local data: clear this site's data in your browser, or use Clear stats in the Stats screen.
• To access, correct or delete your online account and game data, email potentcapital@gmail.com from the address on your account (or tell us your player name). We will respond within a reasonable time and in any case within the period required by law.
• Depending on where you live, you may have further rights, such as objecting to processing or complaining to your local data protection authority.

Children

The game is suitable for all ages, but online accounts are intended for people old enough to consent to data processing where they live. If you believe a child has given us personal information, contact us and we will delete it.

Changes

If we change this policy we will update the date above, and for significant changes we will say so on the site.

Contact

Questions about privacy: potentcapital@gmail.com.