Privacy Policy
Last updated: August 17, 2026
RollData ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information.
Data Collected
We collect only the data necessary to provide the RollData service:
- Account information: your name and email address, used for authentication and communication
- Training data: sessions, rounds, techniques, partners, promotions, and events you log in the app
- Usage data: basic server logs (IP address, request timestamps) for security and debugging purposes
We do not collect biometric data, location data, or any sensitive personal information beyond what you explicitly provide.
How Your Data Is Used
Your data is used exclusively to:
- Provide and maintain the RollData training log service
- Authenticate your account and protect against unauthorized access
- Send transactional emails (email verification, password reset, account notifications)
- Improve the service based on aggregate, anonymized usage patterns
- Measure which ads bring people to RollData, as described under Advertising
We never sell your data. Your training data, and the contents of your account, are never shared with advertisers or marketing services.
Third-Party Services
RollData uses the following third-party services to operate. Each processes data only as necessary to provide their respective services:
- Vercel — hosts the RollData web application and serves static assets
- Amazon Web Services (AWS) RDS — stores your training data in a PostgreSQL database with encryption at rest
- Amazon Web Services (AWS) SES — sends transactional emails (verification, password reset)
- Stripe — processes subscription payments. Card details go directly to Stripe and never reach our servers
- Vercel Analytics and Speed Insights — measures page views and loading performance without cookies, and without identifying individual visitors
- Google Ads and Microsoft Advertising — measure the effectiveness of our ads, as described under Advertising
- Microsoft Clarity — records anonymous session replays so we can see where the site is confusing, as described under Advertising
Advertising
RollData advertises on Google and Microsoft (Bing). To tell whether those ads actually bring people to the app, every page carries a measurement tag from each: the Google Ads global site tag and the Microsoft Advertising UET tag. When you create an account, each tag reports that a signup happened, so the ad that led you here can be credited.
These tags send Google and Microsoft:
- The pages you visit on RollData, and when
- Your IP address, browser, device type, and referring site, which those services receive automatically with any request
- An identifier stored in a cookie, used to link an ad click to a later signup
They do not receive your name, your email address, or anything you log in the app. Data collected this way is governed by Google's privacy policy and Microsoft's privacy statement.
You can opt out through Google Ads Settings and Microsoft's ad settings, or by blocking third-party cookies in your browser. Blocking them does not affect any part of the app.
The Microsoft tag also loads Microsoft Clarity, which records how people use the site so we can find pages that confuse or frustrate them. Clarity captures your clicks, scrolling, pointer movement, and the pages you visit, and replays them as an anonymous session recording. It is not told who you are, and we do not use it to identify individual people. Recordings are governed by Microsoft's privacy statement.
Cookies
RollData uses two kinds of cookies.
Strictly necessary cookies are essential for the application to function and cannot be disabled:
- Session cookie — maintains your authenticated session so you stay logged in
- Preference cookie — remembers interface choices such as whether the sidebar is collapsed
Advertising and measurement cookies are set by the tags described under Advertising. They exist only to measure how the site is found and used:
- Google Ads — identifies your browser so a Google ad click can be matched to a later signup
- Microsoft Advertising — does the same for ads on Microsoft and Bing
- Microsoft Clarity — identifies your browser across pages so a session recording covers a whole visit rather than a single page
Blocking or clearing these cookies has no effect on the app: every feature works without them. Stripe also sets cookies during checkout, which are required for payment fraud prevention.
Data Retention
Your account and training data are retained for as long as your account is active. If you delete your account, all associated data is permanently removed from our systems within 30 days.
Server logs containing IP addresses and request metadata are retained for up to 90 days for security and debugging purposes, then automatically deleted.
Your Rights
You have full control over your data. You can exercise the following rights at any time:
- Access your data — view all your training data through your account settings and the training log interface
- Correct your data — edit or update any training sessions, techniques, partners, or account information directly in the app
- Delete your data — delete your account to permanently remove all your data. You can also delete individual sessions, partners, and other records at any time
- Request a copy — contact us at info@rolldata.app to request a full export of your data
If you are in the European Economic Area (EEA), you also have the right to:
- Object to processing of your personal data
- Request restriction of processing
- Data portability
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at info@rolldata.app. We will respond within 30 days.
Contact
If you have any questions about this privacy policy or how we handle your data, please contact us:
- Email: info@rolldata.app
See also our Terms of Service.