Privacy Policy

1. Who we are

Reroll ("we") operates a board-game listing and discovery platform for users in Indonesia. This policy explains how we handle your personal data under Indonesia's Personal Data Protection Law (UU No. 27/2022, "UU PDP").

2. Data we collect

• Account data: name, email, and profile photo from your Google sign-in.
• Profile data: city, WhatsApp number, bio (what you choose to add).
• Listing & activity data: listings you create, images you upload, and interactions such as views and contact taps.
• Safety data: reports you file or that are filed about you, and moderation actions.

3. How and why we use it (lawful basis)

• To operate the service — show your listings, connect buyers and sellers, and let people contact you (performance of a service you requested).
• To keep the community safe — reputation, reports, auto-hide, and bans (legitimate interest).
• To send you notifications you opt into, such as want-to-buy matches (your consent).

We do not sell your personal data.

4. Sharing

Your public profile (display name, city, listings) is visible to other users. If you add an optional WhatsApp number, it is revealed to another user only when you choose to be contacted through a listing (the in-app chat is the default contact channel and does not share your number). We use service providers (e.g. Supabase for authentication, database, and storage; Resend for email) that process data on our behalf under contract.

5. Retention

We keep your data while your account is active. If you delete your account, we remove your personal data within a reasonable period, except where we must retain limited records to resolve disputes, prevent abuse, or comply with law.

6. Your rights

Under UU PDP you may access, correct, or delete your personal data, withdraw consent, and object to certain processing. You can delete your account and personal data yourself anytime in Settings; to exercise any other right, reach us through the Contact support page — we will respond within the period required by law.

7. Security

We use Google sign-in and encrypted connections, and limit who can access data. No system is perfectly secure, so we cannot guarantee absolute security.

8. Cookies & local storage

We use cookies and browser storage only to keep you signed in, remember your preferences (such as language and interface), and enable the installable app (PWA). We do not use third-party advertising or cross-site tracking cookies.

9. Changes

We may update this policy. Material changes take effect on the new version's effective date shown above.

10. Contact

Privacy questions or requests? Reach us through the Contact support page.