Rekijan Apps
← Secret Roller

Secret Roller privacy policy

Last updated: 14 October 2026

1. Who is responsible

Rekijan, trading as Rekijan Apps.
Contact: rekijan.apps@gmail.com

2. Data that stays on your device

Your profiles, players, skills, manual players, your own characters and your settings are stored on your device only. They are not uploaded unless you use a session (see 3).

3. Data stored online

The first time the app starts, it signs you in anonymously through Firebase Authentication, so that sessions can be used later. This creates a random ID; no name, e-mail address or phone number is needed. Firebase Authentication also processes your IP address to prevent abuse.

To protect the online service against abuse, the app uses Firebase App Check with Google Play Integrity. Google then receives information to check that a request comes from the genuine app installed from Google Play, such as the app's package name, version and signing certificate, and device attestation information.

Sessions are optional. When you use one, the following is also stored online:

  • When a GM starts a session: the session code, the creation time, the GM's anonymous ID and an expiry time.
  • When a player sends a character: the character's name, the skills with their proficiency and modifier, and an expiry time.

Only the GM of a session can read the characters sent to that session. Other players cannot. The session code works like a password: share it only with your players.

This data is stored with Google (Firebase Firestore) on servers in the European Union. Google may process technical data to run these services, such as IP addresses and basic device information (for example the device model, the operating system version and how the app was installed).

4. Advertising

The app shows a small banner ad, provided by Google AdMob. To show ads, measure them and prevent ad fraud, Google receives from your device:

  • your IP address, which can be used to estimate your general location;
  • how you interact with the app and the ads, such as app launches, taps and ad views;
  • diagnostic information, such as app launch time and performance;
  • device identifiers, such as the Android advertising ID and the app set ID.

If you are in the European Economic Area, the United Kingdom or Switzerland, the app asks for your consent through Google's consent form before ads that use your data are shown. Whether ads are personalised depends on the choices you make there. You can change your choices at any time via Privacy settings in the app menu. You can also reset or delete your advertising ID in your Android settings.

Google handles this data under its own privacy policy. See how Google uses information from apps that use its services.

You can remove the ads permanently with a one-time purchase (see 8). After that, no ads are loaded.

5. Why

To make the session feature work, to show ads that pay for the app, and to protect the online service against abuse. Legal basis: providing the service you ask for; your consent, for ads that use your data; and my legitimate interest in keeping the service secure.

6. How long

A session and the characters sent to it can be used until 30 days after the GM last used the session. The GM's app renews this each time it connects to the session. The GM can also close a session at any time, which deletes it and the characters sent to it right away. A session that has expired can no longer be used. It is removed when the GM's app next cleans up old sessions. Until it is removed, only the GM of that session can read the characters.

The anonymous ID itself stays until it is deleted. You can ask me to delete it (see 9). Google keeps the information it receives through Play Integrity only for a fixed retention period. Google keeps advertising data according to its own policy (see 4). Data stored on your device stays until you remove it or uninstall the app.

7. Sharing

I do not sell your data. Google is the only other party that handles it: as the hosting provider for sessions, and as the ad provider (see 4). The app itself has no separate analytics and no crash reporting.

8. Purchases and tips

Payments, including tips, the purchase to remove ads and Spacious Pouches (room for more profiles), are handled by Google Play. I do not receive your payment details. The app checks with Google Play which of these you bought, so they keep working after a reinstall.

9. Your rights

You can ask me to show, correct or delete your data, or object to its use, by e-mailing rekijan.apps@gmail.com. Because there are no accounts, please include the session code and the character name so I can find it. For advertising data, you can withdraw your consent in the app (see 4). You can also file a complaint with the Autoriteit Persoonsgegevens.

10. Changes

If this policy changes, the date above changes with it.

Looking for the policy of my other apps? See the general Rekijan Apps privacy policy.