Privacy policy

Scope and contact

Third Roll has not been released on the App Store. This policy describes the current native implementation. It does not cover the separate online web or Windows editions. We will update it when data practices change.

HemSoft's repository maintainers handle support. Ask non-sensitive privacy questions through public GitHub issues. For security vulnerabilities, use GitHub private vulnerability reporting. Both reporting routes require a GitHub account. Do not post private information in public issues. A general private support contact without GitHub is not available yet.

Signed-device traffic, SDK signatures and backup/restore checks remain release gates. We have not completed an App Store privacy declaration and do not claim that package inspection proves zero network traffic.

What the app stores locally

The native app stores the display name you enter, up to five recent names, appearance and game preferences, active-game state including dice and holds, the latest 500 completed games and all-time top ten scores per dice mode. These support resume and local history. There are no accounts, remote players, cloud-sync service, advertising or purchases in this native implementation.

Game data stays in the app's private SQLite storage. No application-level database encryption is configured. Device security and operating-system protections are separate. Data in the documents directory can be included in system-controlled backups, depending on your settings. We do not operate a game-data server for this native app.

Retention and deletion

An active game stays until completed, discarded or reset. Help → Delete all local data asks for confirmation and removes the app's owned game data and preferences. Damaged or unsupported data stays in place until you choose a recovery action. A failed reset can be retried.

Deleting the app removes its local container; offloading may retain it. Reset and uninstall do not erase prior device or cloud backups. Restoring an older backup may restore older game data. Physical-device restore testing remains pending.

Read the recovery guidance before acting on a damaged save.

Diagnostics and external support

Diagnostics are optional. Help previews app version/build, platform and OS version, compact or expanded window category, storage-schema version and scoring-rules version. The preview excludes player names, scores, game identifiers, saved documents, error text, raw logs and credentials. Opening or cancelling the preview sends nothing.

Choosing Share opens the operating system's share controls with the previewed text. The destination you select may use a network service under its own privacy practices. You choose what to submit through external support destinations.

GitHub processes reports under its privacy statement. Public issue reports can be read by others. Maintainers use submitted information to answer questions and investigate problems. Public reports and private security reports can remain in repository history; avoid unnecessary personal information and use the original report to request correction or deletion. GitHub controls its own retention and privacy-rights process.

The inspected unsigned app embeds its JavaScript bundle and has Expo updates disabled. No app-authored analytics or advertising client is configured. Final SDK and measured traffic verification is still required before release; this policy does not assert completed privacy or export-compliance acceptance.

This website

The pages use local assets and bundled fonts. They contain no analytics, forms, third-party embeds, scripts, cookie code or browser-storage code. External destinations are contacted when you follow their links.

GitHub Pages hosts this website. GitHub logs visitors' IP addresses for security, including unauthenticated visitors, as described in its Pages documentation. GitHub controls hosting logs and their retention under its privacy statement; HemSoft does not set a separate retention period for those logs or receive them as app gameplay data. Do not interpret the absence of analytics code as an absence of hosting logs.