Privacy policy

Who we are

The Roulette Assistant is operated by Galya OÜ. Write to support@therouletteassistant.com about anything on this page.

The app is a roulette simulator. It uses virtual points only. There is no real money in it, nothing to buy, nothing to win and nothing to cash out.

An account is optional

You can use every part of the app without an account. There is no sign up wall and no feature is held back for people who stay signed out. Built without its optional backend keys, the app creates no account or sync connection at all and hides every account surface. That is specifically about accounts and syncing: the deployed website still counts anonymous page views as described below.

An account exists for one reason: to carry your saved state between devices. If you never sign in or ask for a sign in link, nothing in the next section is collected.

What we collect when you sign in

Four things: the email address you sign in with, a copy of five saved files from the app, whether you asked us to email you about the app, and the two letter code for the country you signed in from.

Your email address

Signing in works in one of two ways: a one time link sent to your email address (by our email delivery service, Resend, as the section on where it is stored explains), or Google sign in, where that path is enabled in the build you are using. Either way we hold your email address twice, once in the authentication service and once in your profile row, next to your account id, the date the account was created, and the flags that record which features the account has. Each sign in email also leaves a record with Resend for a short while, as that section explains.

The administrator flag

One of those flags marks an account as an administrator. It is set directly in the database, and no screen in the app can turn it on for anyone.

An administrator can read every profile row. That means they can see the email address, the account id, the creation date and the feature flags of any account, and they can change what features an account has. Every such change is written to a log. The administrator role does not open your synced files: those rows can be read only by the account that owns them.

The five saved files that sync

• Game state: your points balance, how many times you have topped that balance up, the pace you set for the live table, the chip you have selected, the round you are in the middle of, the record that you ticked the confirmation on the welcome screen, and one old on device preference that no longer unlocks anything. Your sound settings and whether office mode is on stay on each device and are not uploaded. A copy saved by an earlier version of the app may still hold them until your next sync replaces it, or until you delete the copy in your account or the account itself.
• Table rules: the table limits and chip values you have chosen.
• Saved bet layouts: bet patterns you saved so you can place them again.
• Real Table Assistant: the numbers you entered from a real table, plus the three settings you chose for it: which system you selected, the base bet for the classic systems, and the bet unit for the app's own system. One part is removed before upload, and only that part: the step by step working records of the app's own system, which stay on your device. The numbers and those three settings do upload.
• Strategy runs: the runs you saved in the strategy section.

That is the complete list. Each file is stored as one snapshot per account, capped in size, and overwritten by the next sync.

The confirmation you ticked on the welcome screen

One item inside the game state file is worth naming on its own, because it is not a game setting. When you first open the app you tick a box that reads "I am 18 or older (21 or older where local law requires it) and I understand these are virtual points only." It sits on the same screen that links to this policy and to the terms. The app records that you ticked it. If you are signed in, that record travels with the game state file, so it sits on the server next to your email address, which makes it an age and acceptance record linked to you.

We keep it for two reasons: so the app does not put the gate in front of you again on every device, and so we hold a record that the confirmation was given. It is removed when you delete your account, like everything else in that file.

Whether you asked us to email you

When you sign in there is a box you can tick to hear about new guides, results and features. It ships unticked, and it stays unticked unless you tick it. If you do, your profile row records that you said yes and the moment you said it, so we can show that the permission was given. You can switch it off in the account window whenever you like, and when you do, both the yes and the time it was given are removed. Beyond signing you in, that address is used for those messages and nothing else. It is never sold, and never given to anyone for their own use: Supabase and Resend handle it only to do their part of the work for us, and Google's part in Google sign in is described under where it is stored.

You can also ask for that email in the box at the end of our guide, strategy, question, lab note, how we test and press pages. The box sends you a one time sign in link, and says so. Opening the link signs you in, creating your free account if you have none, and the app then asks you once, after its welcome screen, whether to turn the email on. Only a yes there is recorded, with the moment you gave it; opening the link alone records nothing. The page keeps in your browser only the times it asked for a link in the last hour, never the address, so it can hold back when too many are asked for. If you said yes before 7 October 2026, you said it to news of new features and launches, and that is all we send you unless you say yes again.

Asking for a sign in link, in the app or in that box, for an address we have not seen before sets up an account record holding that address straight away, before the link is opened, as any sign in request does. If the link is never opened, the record stays unconfirmed and holds no yes to email. Write to us and we will delete it.

The country you signed in from

Your profile row holds a two letter country code, so we can see which countries the app is used in. It comes from the connection you signed in over: a small function of ours at the edge of the network reads the country the request arrived from and returns those two letters to your browser, which saves them against your account. That function reads the country and nothing else. The address is not returned to your browser, not written down by us and not stored anywhere of ours. The connection still reaches our hosting provider the way it reaches any server, and it keeps its own short lived request logs, which the section on where it is stored explains. Two letters is as narrow as it gets: a country, never a town and never an address.

This happens on the website. The iOS app does not do it, so an account that has only ever signed in from the app has no country recorded against it.

We do not collect your name, your postal address, your phone number, your precise location, your contacts, your photos, your device identifiers or any advertising identifier.

What never leaves your device

Your raw spin history stays on your device. It is kept under its own storage key, deliberately outside the files that sync, and it is not in the list of files that upload. Your session records, your day summaries and your app preferences stay on the device too. That includes your sound settings and whether office mode is on, which the app no longer uploads with the game state, as the list above explains.

If you delete the app, or clear its storage, that data is gone. We have no copy of it.

Where it is stored

The optional account data is stored in our Supabase project. Supabase provides the database and the authentication service and processes the data for us, under our instructions, not for its own purposes. We set that project up to hold the data in the European Union (Ireland). That is our own record of the region we chose when we created the project, and it is a setting in our hosting account that the app cannot read back and show you, so if the exact location matters to you, write to support@therouletteassistant.com before you sign in and we will confirm where the project sits at that moment. If it ever moves, this page says so, and everything this policy promises about that data applies to it wherever it is held.

The anonymous usage counts described below sit in the same project, in a table that has no account column, no email and no address in it.

One thing worth saying plainly, because "we never store an address" could otherwise be read as more than it is: our hosting and database providers see the connection the way any server does, and keep their own short lived operational logs. We do not read an address out of those, we do not copy one into anything of ours, and nothing in our database has a column for one.

The website analytics described below is provided by Vercel, which is also our hosting provider and the edge that reads the country of a sign in.

The one time sign in links are sent by Resend, an email delivery service, from support@therouletteassistant.com under the name The Roulette Assistant. To send one, Resend receives your email address and the message itself, which carries the link. It handles them as our processor, under its data processing agreement, and uses its own records of the deliveries to run, improve and protect its service. We set it to send from its region in Ireland, but that choice covers where the email is sent from, not where Resend keeps its records: by Resend's own account, what it stores (your address, the message and the record of its delivery) is held in the United States and kept for 30 days on its standard plans, with its backups for 7 days more. The transfer to the United States is covered by the Standard Contractual Clauses in that agreement, which Resend publishes at resend.com/legal/dpa (or write to us for a copy), and by Resend's participation in the EU-U.S. Data Privacy Framework. Resend does not track whether you open the email or click the link: that tracking is switched off, so the email carries no tracking image and its link is not rewritten.

Where Google sign in is enabled in the build you are using and you choose it, Google is a recipient too: the sign in happens on Google's side, so Google learns that you signed in to this app, and it returns your email address to us. If you use the one time email link instead, Google is not involved at all.

How long we keep it

While your account exists we keep your profile row and the latest copy of those five files. Each sync replaces the previous copy instead of adding to a history, and there is no automatic expiry. When you delete your account it all goes, with the exceptions named in the next section.

Resend's record of each sign in email it sent (your address and the message) is kept for 30 days from the day it was sent, and its backups for 7 days more, whether or not you still have an account.

If you turn the email choice off, the record that you turned it on goes with it, immediately.

The anonymous usage counts are deleted after thirteen months, and the random id a browser uses for them is retired after thirteen months too, so it starts again as a new one.

Your rights, and deletion

Deleting your account

Use Delete account on the account screen in the app. You can also ask us to do it by writing to support@therouletteassistant.com from the address you signed in with.

Deletion removes the account record itself from the authentication service, and everything attached to it goes with it: both copies of your email address, the one in the authentication record and the one in your profile row; the rest of the profile row, meaning your account id, the creation date and the feature flags; every synced file; and the sign in sessions held for the account. We do not keep a copy of your email address anywhere after that, with one short lived exception: Resend's record of the sign in emails it sent you, which goes once its 30 days, and the 7 more of its backups, have run out. Write to us if you want it removed sooner and we will ask Resend to remove it.

One exception, stated plainly: if an administrator ever recorded an action on your account, that log row stays, and the references to you inside it are set to empty. The row survives the deletion de-identified, so it no longer points at you.

Seeing your data

Almost everything we hold is your own saved state, visible in the app itself. If you want a copy of what sits on the server, write to support@therouletteassistant.com from your account address and we will send it.

The anonymous counts described below are not part of a copy or a deletion request, for the same reason they are anonymous: nothing in them points at you, so there is no way for us to find yours to send or to remove, and no way for anyone else to either. If you would rather not be counted at all, switch on Do Not Track or Global Privacy Control in your browser and we will count nothing, or clear this site's storage and the browser starts again as one we have never seen.

If you are in the EU, the EEA or the UK

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time. You can also complain to your national data protection authority.

Our grounds, item by item. The account itself and the five synced files: the service you asked us to provide. The product email: your consent, given by ticking the box, or by answering yes in the app after opening the link the box on our pages sends you, and withdrawn by unticking it, with no effect on anything else. The country code and the anonymous counts: our own legitimate interest in knowing where the app is used and whether it is worth continuing, which is why neither of them is allowed to identify you.

Anonymous measurement

The website counts how it is used, so we can see whether it is worth carrying on with. Two things do that, and neither of them knows who you are.

Vercel Web Analytics counts page views in the app without cookies and without building a profile of you: we see that a page was read, not who read it.

Our own counter records a handful of moments: that one of this site's pages outside the app was read (a guide, strategy, question or lab note, the page on how we test, the press kit, or a policy or support page), and which one, which also tells us its language; that the app was opened, and whether it was opened from one of those pages; which of the three tabs were opened; and which features were used. Each visit also notes where it came from: the site that sent you, or the short tag in the link you followed, such as ref=reddit or utm_source=newsletter. One row holds a date, one name from a list of four, a short label such as which tab or which page (its web address, with nothing after a question mark), where you came from, a random id this browser made up for itself the first time it came, and the date it first came, which is the part that lets us see whether people return. There is no account id in it, no email, no IP address, no query string, no page inside the app and no clock time, and the request that writes the row is sent without your sign in, so a signed in player's rows look like everyone else's. We could not connect one to an account if we tried.

While a browser tab stays open it keeps one small note: where it last arrived from outside this site, meaning that site or the link's tag, or nothing for a direct arrival. If you read one of our pages and then open the app in the same tab, the app visit is credited to that site rather than to our own page. A new tab starts without the note, so there only a tag in the link can be carried over. The note holds only that site or tag, sits in the tab's session storage, and is gone when the tab closes. No cookie is set for any of this.

The random id is the part worth being plain about. It is what lets us tell a browser that has come back from one that is new, which is the only way to answer whether people return, and it is why the counts can be called anonymous rather than merely unnamed: it is a number with nothing attached to it, first party, never shared, and retired after thirteen months.

What is never counted: the numbers you record from a real wheel, the starting spins the app generates for itself the first time you open it, and the wheel turning by itself while nobody is playing. None of those is a person doing something.

If your browser sends Do Not Track or Global Privacy Control, we count nothing at all, in the app or on any other page.

The iOS app is in none of this. It sends no page views and no usage counts, and it records no country.

No selling, no ads, no tracking

We do not sell your data and we do not share it for advertising. The app carries no advertising and no third party advertising software. There is no payment path in the app, so no payment details are collected.

The app does no tracking. Nothing it collects is linked to data from other companies' apps or websites, and nothing is shared with data brokers or advertising networks.

If the app changes hands

If the app, or the business behind it, is ever sold, merged or handed to someone else, the account data goes with it, because the accounts are part of what is being sold. The new owner inherits this policy exactly as it stands, everything promised here keeps applying until they publish a policy of their own, and this page will say so before anything changes.

That is a transfer of the business, which is a different thing from selling your data to somebody who wants to market to you. We do not do the second one. What a future owner does is theirs to publish, which is why the paragraph above says they inherit this page and that you will read about any change here first.

Age

The app is for adults: you must be 18 or older to use it, or 21 or older where local law requires it. Do not create an account if you are younger than the age that applies where you live. If you believe someone under that age created an account, write to support@therouletteassistant.com and we will delete it.

Apple App Privacy labels

The same facts, in the vocabulary App Store Connect asks for. These rows describe the iOS app, not the website that hosts the browser version of it. Nothing here is used for tracking as Apple defines it.

If you never sign in, the first three rows are not collected at all.

Changes to this policy

If this policy changes, the date at the top changes with it and the new version is published on this page.

Contact

Galya OÜ, by email at support@therouletteassistant.com. See also the terms of use and the support page.