INFINITY ROLLRoll. Discover. Collect.
Checking…
ACCOUNT & DATA

Privacy & security

How Infinity Roll handles player information, protects official rolls, and separates your personal account from your public game profile.

BETA v0.9 DATA NOTES · UPDATED OCTOBER 9, 2026
TO MAKE THE GAME WORK

What is stored, and why.

Your account

Your email, account identifier, confirmation status and sign-in information support authentication and account recovery. Sign-in is handled through Supabase Auth.

Your game history

Official rolls, their timestamps, detected traits, probabilities and XP preserve your history and power profiles, leaderboards, collections and streaks.

Your style and connections

Your display name, equipped cosmetics, Stardust receipts, purchases, friendship requests, inbox events, reactions, trophy shelf selections and blocks keep your settings, wallet and social features consistent. Unsaved inbox mail expires 14 days after creation and is removed when you open your inbox or receive new mail. Messages you save remain until you unsave them or delete your account; mail expiration does not remove the underlying game records.

Username safety

Rejected username attempts are stored privately in Supabase with your account ID, attempted name (up to 128 characters), rejection reason, source, timestamps and repeat count. These records help administrators review abuse and improve the filter. They are not public and do not automatically suspend your account. They are deleted when your account is deleted.

Player reports

Submitted reports store the players involved, category, description and review status. Authorized moderators can read and review them. Reports are not shown on public profiles and do not automatically penalize a player. Moderator warnings, suspensions, name resets and suspension lifts record the moderator, affected account, reason and time. The affected player receives an inbox notice.

Operational information

Account-level request counters help limit abuse. The application records limited error references or codes for troubleshooting. Hosting and authentication services may also generate operational logs; their settings and retention are managed separately.

YOUR PUBLIC GAME IDENTITY

What other players can see.

Current player visibility
InformationVisibility
Name, stable player tag, profile banner, icon and titleVisible to other players in game views.
Rolls, XP, traits, profile records and streaksVisible through player profiles, history and leaderboards. Roll cards you download can be shared outside the game.
Activity, reactions and trophy shelvesYour friends can see your recent rolls and reaction totals on their feed. Pinned trophies appear on your public profile. Blocking filters the feed, reactions, shelves and friendship notifications between the affected accounts.
Notification inboxAvailable only to its owner. Moderator action records are restricted to authorized moderators.
Email and account detailsNot included in public player-profile responses.
Friend lists and requestsAvailable to the signed-in owner through the social feature; a request is visible to its recipient.
Stardust balance, purchases and owned inventoryAvailable to the signed-in owner. Equipped profile cosmetics are visible to other players.
Blocks and reportsYou can see your own block list and export reports you submitted. Moderators can see reports for review. Blocking hides profiles, rolls and social connections between the two accounts in game views; global rankings still count both players.
Website background, accent and tile styleApplied to your own browsing experience. Opening someone else’s profile does not change your theme.

Infinity Roll currently has public game profiles rather than a private-profile mode. Choose a display name you are comfortable showing to other players.

FAIR PLAY, BUILT INTO THE SAVE

How official progress is protected.

Server-generated rolls

The server generates official characters and scores traits. Browser-supplied XP, outcomes and currency amounts are not accepted as official rewards. Verified, active accounts are required to roll.

Protected database actions

The database enforces roll windows and the minimum cooldown, serializes claims per account, and prevents direct client writes to rewards, wallets and inventory.

Safe retries and purchases

Roll receipts prevent a retry from granting another roll or award. Purchases use stored prices and locked wallet balances; buying an already-owned item does not charge twice.

Checks at the boundary

Sign-in checks, request limits, bounded inputs and origin checks protect state-changing game actions. Cosmetics do not improve odds, XP or roll eligibility.

These are safeguards, not a promise that any online service is invulnerable. If something looks wrong, report the behavior without trying to access another player’s private information.

ON YOUR DEVICE

Cookies, storage and your choices.

For details on Google’s handling of information, see how Google uses information from sites and apps that use its services.

Authentication uses session cookies and browser session mechanisms. A temporary roll-attempt identifier in session storage helps recover a roll after a connection problem. The display-theme library may store its preference locally. Settings and tutorial completion are stored in this browser; settings include motion, reveal length, visual intensity and audio preferences. Music starts when you press Play and uses a fresh shuffled order for each visit. Purchased cosmetics and your equipped website background are saved to your account.

The production homepage includes Google’s AdSense script for site verification and advertising setup. If Google serves ads, it may use cookies and similar technologies for ad delivery, measurement and personalization according to your consent choices and Google’s policies. The public discovery analyzer runs in your browser; its input is not saved to your account. The game currently has no separate third-party analytics integration. Account and game records remain stored to support history and progression; you can download your data or permanently delete your account from Profile. Deletion removes account and game records from the active database, including rolls, wallet, cosmetics, connections and reports involving that account. Enforcement audit records remain for accountability with deleted account identifiers cleared; the recorded reason and action time remain. Copies shared outside the game cannot be recalled. Provider backups and operational logs follow their separate retention; retention for other application records has not yet been assigned a fixed schedule.

You can change your display name and cosmetics in Profile, block or report players and manage friends in Social, and sign out on a shared device.

QUESTIONS, BUGS OR SECURITY CONCERNS

Get in touch.

Include your public player tag, what happened and approximately when. Never send passwords, session tokens or service keys.

INFINITY RADIOSHUFFLE
Before the Twelve Fall