Signed-in saved sets are limited to their owner by database access rules.
People with an active six-character code can join and see that room's content.
The server checks Turnstile before it saves or emails a support message.
1. Classroom and children
Retiroll can support teacher-led activities, but live room content leaves the host device. Use only information you are allowed to share.
A teacher can use the Sandbox without an account. A saved set synced from a host account is stored in that private cloud account. When a host opens a live room, the room service temporarily stores its configuration and connected participants receive room settings and activity. Anyone with the active code can request the room configuration.
Use initials or pseudonyms where practical. Do not add sensitive student information. Schools should review the Privacy Policy and their own rules before using student information. We do not claim COPPA compliance or compliance with every school or student-privacy law. COPPA coverage depends on audience and actual data practices.
Out of an abundance of caution for student and young audiences, every ad request on our allowed public pages carries Google's child-directed protection signal (data-tag-for-age-treatment="1") and requests non-personalized ads (requestNonPersonalizedAds = 1). Live player rooms (/play/[code]), host creation, account authentication, and contact routes remain strictly 100% ad-free and tracker-free.
2. Saved information and live rooms
Account sets sync to your account. A live room is temporary and visible to participants who connect with its active code.
Local settings and personal spin history may remain in your browser. Account-saved sets sync to Supabase and are protected by owner access policies. A room closes when its host closes it or after 1 hour without a host renewal. Expired room content is removed by scheduled cleanup.
During play, Supabase Realtime sends the display names, room settings, and actions needed by connected participants. Participant presence does not include account user IDs. The channel is protected in transit by the browser’s secure connection, but room data is not end-to-end encrypted between participants. We do not send individual spin results to Community Activity.
3. Support and service providers
We use Cloudflare, Supabase, Resend, and Google only for the features described in the Privacy Policy.
Cloudflare delivers the site and verifies contact forms. The contact server rejects missing, invalid, expired, wrong-action, or wrong-hostname Turnstile tokens before it attempts to save a message. Messages must be saved to our database before email delivery occurs; if database storage fails, the request fails closed and no email is sent. Supabase provides authentication and database services. Resend delivers contact email. Google may provide the consent tool and contextual ads on eligible pages. Providers may process connection metadata such as IP address and timestamps according to their service settings and policies.
4. Advertising and consent
Ads are served only on public decision and informational pages. All ads carry child protections with zero personalized targeting, and live player rooms are 100% ad-free.
We display contextual ads on public decision and informational pages (/, /sandbox, /presets, /blog, /about, /faq, /guide, /safety, /updates, and /changelog). Every ad unit enforces Google's age-treatment signal (data-tag-for-age-treatment="1") and non-personalized request setting (requestNonPersonalizedAds = 1) to prevent behavioral ads, remarketing, and third-party ad profiling. All live participant rooms (/play/**), host creation workflows, and account forms remain strictly 100% ad-free. The site code does not load Google Analytics. Read the Privacy Policy for page categories, provider details, and your choices.
5. Randomness and appropriate use
Retiroll makes casual selections. It is not a certified random source for gambling, prizes, or legal decisions.
Selection code uses the browser's standard Math.random() along with mode-specific physics. This is not cryptographic randomness. We do not certify results for regulated lotteries, gambling, sweepstakes, or legally binding decisions. Review weights and settings before a classroom or group activity.
6. Connection security and limits
Retiroll uses HTTPS and database access rules, but no website can promise that every device, network, account, or provider is risk-free.
The deployed site configures HTTPS, HSTS, and other response headers. We do not claim to use a Content Security Policy or end-to-end encryption. Report a suspected account or privacy issue to retiroll.dev@gmail.com.
7. Independent reports
Third-party reputation pages contain their own assessments. A link to one is not a guarantee or security certification from us.
You can review the public Web of Trust report and Trustpilot page. Those services control their ratings, methods, and content. We do not claim that a rating proves Retiroll is risk-free.