Privacy policy

Who runs this

Diceplots is operated by Defensible Logic, Inc. Contact: tom@defensiblelogic.com.

This policy covers the website at diceplots.com and the official Diceplots mobile apps for iOS and Android.

What the mobile apps collect

Nothing. The Diceplots mobile apps run the dice engine entirely on-device. No accounts, no analytics SDKs, no crash reporting SDKs, no third-party trackers, no cookies. The app requests no permissions other than network access, which is used only to load the embedded reference content (Concepts and Games) from diceplots.com.

When you open the in-app Concepts or Games sections, the embedded web view fetches pages from diceplots.com. Those requests are subject to the same logging described below for the website.

What the website collects

The website logs aggregate-only usage information, used to understand which pages and expressions are interesting and to catch broken links. For each request we record:

• The path requested (e.g. /strike/2d6p5).
• Event-specific properties for interactive events — the dice expression you evaluated, the HP target you set, the view mode you selected. These are entered by you in the comparison tool; they contain no personal information.
• A daily-rotated visitor hash — a one-way SHA-256 of (date + server-side secret + your IP address + user-agent string). The hash lets us count distinct visitors per day, but the inputs cannot be recovered from it. The hash itself rotates daily, so there is no cross-day tracking.
• Your Referer header, if your browser sends one (this is how we see whether visitors are arriving from search, a forum link, etc.).
• A two-letter country code derived at write-time from your IP address via the GeoLite2 country database. Only the country code is stored; the IP address is not.
• The timestamp of the request.

We do not store IP addresses, user-agent strings, or any other raw request identifier. We do not use cookies, fingerprinting, or third-party analytics services.

How we use it

Aggregate counts only — top expressions, top pages, daily visitor counts, broad geographic distribution. Nothing is shared with third parties. We do not sell, trade, or otherwise transfer data to outside parties.

We do not run advertising on Diceplots, and there are no ad networks involved.

How long we keep it

Event records are retained indefinitely for trend analysis, but because they contain no IP address, user-agent string, or stable identifier, they cannot be tied back to you. The visitor-hash rotates daily and is not recoverable.

Children

Diceplots is a reference tool for tabletop and computer RPG players. It is not directed at children under 13, and we do not knowingly collect any data from children under 13. The mobile apps collect no personal data from any user regardless of age.

Your rights

Because the website does not store identifiers that can be tied back to you, we cannot identify or delete records belonging to a specific person — there is nothing we could match against. If you have questions about this, email tom@defensiblelogic.com and we'll respond within a reasonable time frame.

The mobile apps store no data on our side at all, so deletion simply means uninstalling the app.

Changes to this policy

Material changes will be reflected by updating the "Last updated" date at the top of this page. We encourage you to revisit periodically.