Privacy notice
Token Roulette (tokenroulette.dev) is a free browser game. This notice explains what we collect, why, and what you can ask us to do with it. Data controller: Rost CAMP (KvK 95487530), Amsterdam, The Netherlands. Contact: info@rostcamp.com.
No cookies, no accounts
The game sets no cookies. Your progress lives in your browser tab's session storage and disappears when you close the tab.
What we collect
- Your game: the settings you chose, the simulated results, your score, the page that referred you, campaign tags in the link (utm), your country (from our host's IP lookup), and whether you used a phone or a computer. This is stored against a random result id, not against you.
- Your answers to the optional questions (tools you use, spend band, who sees the bill, and the free-text question). Free text is never shown to anyone else.
- Your email, only if you enter it and tick the consent box. We store when you agreed and which wording you agreed to (current version 2026-10-31.1).
- A one-way hash of your IP address, salted, to stop abuse (rate limits). We never store your IP address itself.
- Usage analytics via PostHog's EU cloud, configured not to use cookies or persistent identifiers: which steps of the game were reached and with what settings.
Why, and on what basis
- Emails: only to send what you asked for (one email). Legal basis: your consent (GDPR Art. 6(1)(a)).
- Game data, answers, analytics and the IP hash: to run the game, understand how people use AI coding agents, and prevent abuse. Legal basis: legitimate interests (Art. 6(1)(f)).
No newsletter. We don't sell or share your data, and we don't use it for advertising.
Who processes it
- Vercel (hosting)
- Neon (database)
- PostHog, EU cloud (analytics)
- Google Workspace (the one email we send you, if you asked for it)
How long we keep it
- Emails: until you withdraw consent, and at most 24 months.
- Game results and answers: 24 months.
- Rate-limit counters: deleted after about an hour.
Your rights
You can ask to see, correct or delete your data, withdraw consent at any time, or object to processing. Write to info@rostcamp.com. You can also complain to the Dutch data protection authority, Autoriteit Persoonsgegevens, or to the authority where you live.
Last updated 31 October 2026.