Last updated: October 25, 2026
What we keep
Guest play stores a random session identifier, your chosen display name, results and progress. Accounts also store your email and a salted password hash. We never store your readable password. We also note per day whether you play on the website, the iPhone app or the Android app, for counts of how Roviko grows. For accounts we also remember when Lucia, the computer friend, last invited you and whether you said yes, so she asks at most once a day and stops after two noes. If you turn on the reminder by email, we keep that choice, your language, your time zone (so it arrives in your daytime) and the last day we sent one; it goes out through Resend, at most once a day, and every email has a link that turns it off.
Essential storage and optional measurement
An essential cookie keeps your session signed in. Theme, language and sound preferences, small bits of daily progress (such as the mystery country and crowns), and a copy of your player card without your email address (name, streak, points; so Roviko opens faster), stay in your browser. There are no advertising trackers.
You can switch on optional product measurement in your passport. It stores event types and pseudonymous digests, without your name, email, IP address or answers. Its preference cookie contains only on or off.
What others can see
Display names and scores appear in game rooms and rankings. In your passport you can hide yourself from friend requests; hidden players appear as "Explorer" in the daily rankings.
Friends you have accepted can see whether you have Roviko open right now (online in the last 90 seconds) and can invite you to their room. Guests never share an online status.
If you report a player, we store who reported whom, the reason, the room code and the time, to review it. If you block a player, we store that block so you are never matched again. The reported player never sees who reported them. Reports about you are deleted with your account.
Your choices
In your passport you can download your data and delete your account. Guest progress is tied to the session cookie. You stay signed in for 60 days after your last visit. Rooms expire after 30 minutes without active players.
How long we keep it
Accounts and their results stay until you delete your account in your passport; everything is then removed at once. Guest progress is deleted automatically after 12 months without a game. Sign-in sessions end 60 days after your last visit, game rooms 30 minutes after the last player leaves, and optional measurement events after 90 days.
Why we may use it
We use your data to run the games and your account you asked for (performance of a contract), to keep Roviko safe and fair, for example against cheating and abuse (legitimate interest), and only with your consent for optional measurement, which you can switch off at any time.
Roviko is meant for players aged 13 and up. If you are younger than 16, ask a parent or guardian before you create an account.
Where it is stored
The website and its database are hosted by Cloudflare. Emails we send you (welcome, confirming your address, a new password) go through Resend, which only receives your email address and the message. If you choose to sign in with Google, Google confirms your email address to us. Cloudflare and Resend process data only on our instructions; where data leaves the EU, it is covered by the EU–US Data Privacy Framework or the EU standard contractual clauses. We do not sell data and share it with no one else.
Who is responsible
Roviko is made by Jonker Studios, which is responsible for your data. Questions, requests to see or correct your data, or complaints: support@roviko.app. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).