Your seat, your data.

The short version

• You can play without an account. We create an anonymous player ID so games work.
• If you sign in, we keep your profile, wins and teams so they follow you across devices.
• We don’t sell your data, show ads, or track you across other apps and websites.
• Before you play online we ask for your birth month and year, to keep online tables 13+ and video 18+. Other players never see it.
• Voice and video chat go directly between players’ devices, or through an encrypted relay when they can’t connect directly. We don’t record or store either.

What we collect

When you play (no account needed)

• An anonymous player ID, created automatically so we can seat you at a table and keep your place if you reconnect.
• The name you enter for a game, which other players at your table can see.
• Your birth month and year, asked once before your first online table. We use it only to check that you’re old enough for online play (13+) and video (18+). It’s never shown to other players or sent to our analytics. If you’re under 13, we don’t keep your birth month or year, only the month you’ll become old enough.
• Game activity: the tables you create or join, your rolls and moves, and results.
• Table chat messages and reactions you send, which the other players at that table can see. Chat is automatically filtered for offensive language.
• Messages to friends you send from the Social screen, which only you and that friend can see. They are filtered for offensive language in the same way.
• Reports and blocks: if you report a player, we keep your report together with that player’s recent messages at the table so we can review it. If you block someone, we keep that choice so it applies at future tables too.
• Feedback, if you send some: your rating, anything you write, and where you sent it from (which screen, game and language, and web or app). We read it to improve the game. If you’ve told us you’re under 13, we keep only the rating.
• Notification settings and a device token, if you turn on notifications: the token lets us reach your device, and we keep your time zone so quiet hours work.
• Your figurine, if you make one: the looks you pick for it (skin tone, eyes, hair, facial hair, glasses, headwear and clothes). The other players at your table see it when it’s your pieces. If you make it your profile picture, we save a picture of its face the same way as an uploaded photo.

If you sign in

• Your email address or phone number, used only to send you a sign-in code and to recognize your account.
• If you continue with Apple or Google: the email address (with Apple, this can be a private relay address that hides your real one) and, the first time, the name they share with us, plus an ID that recognizes your account. We never see your Apple or Google password.
• Your profile: display name, chosen avatar, country (optional), and a profile photo if you upload one. Uploaded photos are stored at a public web address so other players can see your avatar.
• Your wins, shown on the leaderboard, and teams you create or join.
• If you sign in with Game Center in the iPhone or iPad app: an ID Apple gives us for your Game Center account, used only to recognize your account, and your Game Center nickname as your starting display name. We don’t receive your Apple ID, email or contacts.

Game Center

In the iPhone and iPad app, if you’re signed in to Game Center, your win total and achievements are sent to Apple’s Game Center, where Game Center players can see them. Apple handles that information under its own privacy policy. You can turn Game Center off in your device’s Settings.

Starting your figurine from a photo

If you’re signed in and 13 or older, you can start your figurine from a photo. The photo is made smaller on your device, with its location and camera details removed, and sent to Anthropic, whose AI model, Claude, looks at it once and picks the nearest skin tone, eye color, hair, facial hair, glasses, headwear and clothes from our lists. It isn’t asked to judge anything else about the person. Only those picks come back to you, to change as you like before saving. We don’t keep the photo. Anthropic deletes it within 30 days (longer only if it’s needed to enforce Anthropic’s usage policy or by law) and doesn’t use it to train its models. Only use a photo of yourself, or of someone who has said you may. To limit photos to five a day, we keep the time of each one for two days.

Usage analytics

We use PostHog to understand how the game is used — for example which screens are visited, which buttons are tapped and how games go — so we can improve it. PostHog also makes session recordings: replays of how a visit moved through the screens, with taps and scrolls. Every word on screen and everything typed is hidden in them, so they never show names, chat or codes, and the 3D table and video aren’t recorded. When something goes wrong in the game, PostHog also receives an error report: the error and where in our code it happened, with the codes that let someone join your table, team or TV screen removed. PostHog uses your IP address to estimate your approximate location (country and city). These analytics aren’t linked to your name, email or phone number. Recordings and analytics are deleted automatically after PostHog’s retention period. On a device where someone has told us they’re under 13, we turn analytics off. On our website (not the app) we also use Google Analytics, through Google Tag Manager, to measure visits and how games go: for example which way of playing you chose, when a game starts and ends, your place, simple counts such as captures and sixes, and whether you used chat or a call. Games are identified by a random match number, not by your name or account. We never send Google your name, contact details, chat, your age or birth date, or the links and codes that let someone join your table, team or TV screen. In the European Economic Area, the UK and Switzerland, Google Analytics is off. Google Analytics keeps this event data for 14 months. Both PostHog and Google Analytics use cookies or similar browser storage. On our website we also use Vercel Web Analytics to count visits. It sets no cookies and doesn’t keep your IP address: it records the page visited (without anything after “?” in its address, so never the links that let someone join your table), the site you came from, your country, and the kind of device, browser and operating system. It’s off on a device where someone has told us they’re under 13.

Ad measurement

We run a few ads to let people know the game exists, and on our website (not the app) we use two tags to see whether they bring people who actually play. The Google Ads tag sends Google a cookieless signal when a page loads. The Meta (Facebook and Instagram) pixel sends Meta one event when a game finishes, with the kind of game and how it was played, and sets a Meta cookie on this site; it sends nothing when a page loads or a game starts, and we’ve turned off its automatic collection of taps and form fields. Neither tag receives your name, contact details, chat, age or the links and codes that let someone join your table. Both are off in the European Economic Area, the UK and Switzerland, and on any device where someone has told us they’re under 13. Meta and Google may match these signals to accounts they already know of; their own policies apply to that.

How we use it

• To run games: seating players, syncing moves, timing turns, and letting computer players fill in.
• To keep your profile, wins, teams and leaderboard place when you sign in.
• To send the sign-in codes you ask for.
• To keep the game working, secure and fair, and to improve it.
• To review reports and remove content or players that break our Terms of Use.

We don’t sell or rent your information. The only use of it in advertising is the ad measurement described above; we don’t show ads in the game.

Who we share it with

Only the services that run the game on our behalf:

• Supabase — accounts, the game database, real-time play and photo storage.
• Twilio — sends sign-in codes by text message, if you sign in with a phone number, and relays voice and video calls when players’ devices can’t connect directly. Calls stay encrypted through the relay, so Twilio can’t see or hear them, and nothing is stored.
• Apple — only if you choose “Continue with Apple”, and for Game Center sign-in, leaderboard and achievements in the iPhone and iPad app.
• Vercel — hosts the website and counts its visits.
• Anthropic — only if you start your figurine from a photo: its AI model looks at the photo to suggest your figurine’s looks. Anthropic deletes the photo within 30 days and doesn’t train on it.
• PostHog (usage analytics and session recordings) and, on the website only, Google Analytics through Google Tag Manager (usage and game analytics), both with approximate location from your IP address.
• Meta and Google Ads — on the website only, for ad measurement as described above.
• Google — only if you choose “Continue with Google”.
• Apple, Google and your browser’s push service — deliver the notifications you turn on. They receive the notification text and your device token.

We may also disclose information if required by law, or to protect players and the service from abuse.

Voice and video chat, your microphone and camera

Voice chat is optional and only starts when you join the table’s audio. Video is optional too, your camera is off until you turn it on, and it’s only offered at private tables where every player is signed in and 18 or older. It’s never offered in Quick match.

Calls connect you directly with the other players at your table. When a direct connection isn’t possible, the call passes through an encrypted relay run by Twilio, which can’t see or hear it. We only pass along the connection details needed to set the call up. We never record or store what’s said or shown, so a report about a call relies on your description of what happened. You can leave audio or turn your camera off at any time, and turn off microphone and camera access in your device settings.

These protections cover the official Luddo House website and apps. We can’t control a modified app, or someone recording their own screen, so only share video with people you trust.

How long we keep it

• Your account, profile, wins and teams are kept until you delete your account.
• Game records and table chat are kept to run the service and may be removed over time.
• Anonymous player IDs that are no longer used may be removed.
• Your birth month and year are kept until you delete your account. For an under-13 answer, the account or player ID and everything tied to it, including any profile photo, are deleted after 30 days without play.
• Device tokens are kept until you turn notifications off on that device, the device stops accepting them, or you delete your account.
• Feedback is kept until you delete your account.
• Your figurine is kept until you delete it or your account. Photos you start a figurine from aren’t kept by us; the times you used them are deleted after two days.

Your choices and rights

• Play without an account, or sign out at any time.
• Edit your name, avatar, photo and country from your profile.
• Change or delete your figurine from your profile.
• Leave or delete teams from your profile.
• Delete your account and data at any time: open your profile and tap Delete account. This immediately deletes your account, profile, photo, figurine, wins and the teams you own, and, if you used Sign in with Apple in the app, revokes our access to your Apple ID. Games you played stay in the other players’ history without your account attached. You can also email support@luddohouse.com and we’ll do it for you.
• Ask for a copy of your data, or to correct it, by emailing us. Depending on where you live, you may have further rights under local law, and we’ll honor them.

Children

Luddo House’s online tables are for players 13 and older, and video is for players 18 and older. Younger players can still play against computers, or pass-and-play on one device, without an online account. We don’t knowingly collect personal information from children under 13; when someone tells us they’re under 13, we keep only the month they’ll become old enough. If you believe a child has given us personal information, contact us and we’ll delete it.

Security

Information is sent over encrypted connections, and game actions are checked on our servers so players can only act for their own seat. No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we change this policy, we’ll update the date at the top, and for significant changes we’ll let you know in the app or on the website.

Contact

Questions or requests: support@luddohouse.com