Last updated: 1 October 2026
Greener Grass Oy ("we", "us") makes the mobile dice game Golden Roll ("the game"). We are responsible, as the controller, for the personal data described here. This policy explains what the game collects, why, where it is kept, for how long, and how you can get a copy of it or delete it.
The short version
- The game creates an account on your device automatically. You don't have to give us your name or your email address to play.
- Our game servers, database and backups run on Amazon Web Services in Frankfurt, Germany, in the EU.
- The game shows ads from Unity LevelPlay. Unity and its ad partners use device identifiers to show and measure ads, and personalise them only if you allow it. You can change your choice at any time.
- We do not sell your personal data.
- You can get a copy of your data, or delete your account, in Settings → Account.
What we collect and why
Your game account. When you first open the game, it creates a random account id, a random device id and a random password, and stores them on your device. Our server keeps the account id, the device id, a scrambled (hashed) copy of the password, your platform (iOS or Android), the game version, and when the account was created and last used. If you use your account on more than one device, it keeps these for each device: its account id, the hashed password, its platform, and when the device was added and last signed in. While the game is open, our server also notes which device is connected, so that another device of yours can tell you the account is in use there. We need these to save your progress and keep your account secure. Legal basis: our contract with you (the game's terms).
Your player profile. Your player name (a generated one such as "Player-4F2A1C" unless you choose your own), the avatar you pick from the game's built-in pictures, and your duel statistics. Other players see these in matches, on leaderboards and in their friends lists. Legal basis: contract.
Player names. Because other players see your name, we check new and changed names against the name rules in our terms every day, and replace a name that breaks them with a generated one. For this we keep a record of the names you set for 30 days. If we replace a name, we keep that name and the number of times it happened until you delete your account, so that the same name can't simply be set again. Legal basis: our legitimate interest in keeping the game safe for other players.
Friends. Your friend code, your friends, the friend requests you sent and received, and the players you blocked. When someone enters your code, you get a friend request, and you become friends only if you accept it. Your friends see your profile and whether you are online or in a match. You can decline a request, and remove or block a friend, at any time. Blocking also stops that player from sending you requests, challenging you or seeing when you are online, and they are not told. Other players cannot search for you or see who your friends are. Legal basis: contract, for a feature you choose to use.
Gameplay. Your coins, rubies and other balances, the items and dice you own, your match and challenge results, scores, leaderboard places, quests and rewards, and the game settings you choose. Legal basis: contract.
Account recovery. The recovery code the game shows you in Settings → Account and, only if you add one, an email address you confirm with a code we send to it. We use the email address to let you recover your account on a new device and to tell you about important account events, such as a recovery on a new device or a scheduled deletion. We never use it for marketing. Legal basis: contract, for a feature you choose to use.
Purchases. You buy through Apple or Google, not through us, and we never see your payment card. To give you what you bought, our server checks each purchase with Apple or Google and keeps the store's transaction id, the product, the receipt or purchase token the store gives us, and any refund notice the store sends us. The game also gives Apple or Google your account id with each purchase, so that the store's record shows which account it was for and nobody else can claim it. Legal basis: contract, and our legal duty to keep accounting records.
Support. When you contact us from Settings → Support or by email, we keep your messages and our replies. The game adds its version, your platform, operating system version, device model and language to the conversation so that we can reproduce problems. You can also add your name and email address. This is optional; it helps us find your store purchases. Legal basis: contract, and our legitimate interest in answering you.
Ads. The game shows ads through Unity LevelPlay, run by Unity Technologies and its affiliate ironSource: rewarded ads, which you choose to watch for an in-game reward, and other full-screen ads. The LevelPlay software in the game and the ad networks it works with collect your device's advertising identifier (Google's advertising ID on Android; on iOS the IDFA, only if you allow tracking), identifiers specific to our app, your IP address and the approximate location it indicates, your device model, operating system and language, and how you interact with ads. They use this to deliver ads, limit how often you see the same ad, measure results and prevent fraud, and, only with your consent, to personalise ads. When you finish a rewarded ad, Unity confirms it to our server together with your game account id, so that we can give you the reward. Unity and the ad networks are independent controllers of the data they collect; their use is described in Unity's Game Player and App User Privacy Policy. Legal basis: your consent for personalised ads and, where the law requires it, for storing and reading identifiers on your device; otherwise our legitimate interest in funding the game with ads and in preventing ad fraud.
Your choices about ads.
- In the EEA, the UK and Switzerland, the game asks for your consent before ads can be personalised. It goes by your device's region setting (on Android also your SIM card's or mobile network's country), and keeps your answer on your device. It also records your answer, and when you gave it, with your account, so that we can show what you agreed to. You can change your answer at any time in Settings → Terms & Policy → Personalized Ads.
- On iOS, the game asks whether you allow apps to track you. You can change this in your device's Settings → Privacy & Security → Tracking.
- On Android you can reset or delete your advertising ID in your device's settings.
- If you say no, you still see ads, but they are not personalised.
Technical logs. Our servers record the time and address of each request and your IP address in their logs. We use the logs to keep the service secure, stop abuse such as repeated login attempts, and fix errors. Legal basis: our legitimate interest in running a secure service.
Game events. The game may report basic events, such as a completed purchase, to our server, where they are stored with your account id, game version and platform. We also note each day you sign in. We use them to understand how the game is doing, for example how many players come back. Legal basis: our legitimate interest in improving the game.
What we don't collect
We don't collect your contacts, photos, precise location, microphone or camera, or your activity in other apps. The game doesn't use Game Center, Google Play Games, Facebook or any other social login. It uses only local notifications set on your device and doesn't register for push notifications.
Where your data is stored
Our game server, database, backups and logs run on Amazon Web Services in the Frankfurt (eu-central-1) region in the EU. Some of the partners below process data outside the EU and the EEA. Where they do, the transfer is protected by the European Commission's Standard Contractual Clauses or an adequacy decision, such as the EU–US Data Privacy Framework.
Who we share it with
We share personal data only with these service providers and partners:
- Amazon Web Services hosts our servers, database, backups and logs in the EU.
- Unity Technologies (LevelPlay) and its ad networks deliver, measure and, with your consent, personalise ads (see "Ads" above).
- Google processes Google Play purchases and distributes the Android game.
- Apple processes App Store purchases and distributes the iOS game.
- MailerSend delivers the emails we send you: support replies, confirmation codes and account notices.
- Slack tells our support team about a new message, with its ticket number and first line only, never your contact details.
We don't sell personal data, and we don't share it with data brokers.
How long we keep it
- The devices your account is on: until you sign a device out of the account or delete the account. Which device is connected right now is kept only in the server's memory, while it is connected.
- Account, profile, friends and gameplay: until you delete your account. Deleting it also removes you from your friends' lists. A friend request nobody answers is deleted after 30 days, and the record of the requests you send, which limits how often you can ask, after 30 days. Wrong friend codes you enter are kept for one day, to limit guessing.
- Recovery code: until it is replaced. A code stops working after 12 months, and the game shows you a new one.
- Linked email address: until you remove it or delete your account. Confirmation codes are deleted within a day of expiring, and when you remove the address.
- Support conversations: two years after the conversation is closed. A name and email address you added to a request are deleted 30 days after it closes.
- Purchase records: as long as accounting law requires, currently six years after the end of the year of the purchase. If you delete your account, they are kept without the link to it.
- Game events and the days you signed in: 13 months.
- The names you set: 30 days. A name we replaced because it broke our rules, and how many times that happened: until you delete your account.
- Server logs, including IP addresses: 30 days.
- Backups: 14 days, then overwritten. We never use a backup to bring back a deleted account.
- Match results against other players: kept so that the other players' history stays correct. If you delete your account, your account id in them is replaced with an anonymous marker.
Your rights
Wherever you live, you can ask us for a copy of your data, ask us to correct it, and delete your account. If you are in the EU, the EEA or the UK, you also have the right to receive your data in a portable format, to restrict or object to how we use it (including processing based on our legitimate interests), and to withdraw your consent at any time. Withdrawing consent doesn't affect what we did before. You can complain to a data protection authority: in Finland, the Data Protection Ombudsman (tietosuoja.fi), or the authority where you live.
To use your rights, contact us in the game (Settings → Support) or email support@greenergrass.company. So that we don't hand your data to someone else, we may ask you to write from the game, or from the email address linked to your account. We answer within one month.
For data held by Unity or its ad partners, you can also use the privacy icon shown in ads, or email Unity at DPO@unity3d.com.
Deleting your account
In the game, open Settings → Account → Delete account. If you can no longer open the game, email support@greenergrass.company from the email address linked to your account, or contact us from the game on another device with your recovery code.
The account is deleted 7 days after you ask. Until then you can't play, and you can cancel the deletion in the game. Deletion removes your account, progress, balances, items, linked email address, support conversations and game events, and it can't be undone. Purchases can't be restored afterwards. We keep only the purchase records, match results and backups described under "How long we keep it". Deleting your account doesn't delete what Unity or its ad partners hold; to ask them, see "Your rights".
Getting a copy of your data
In the game, open Settings → Account → Export my data. The game opens a link in your browser that downloads everything we hold about your account as a file. You can do this once a day. You can also ask us by email.
Children
The game is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child under 13 has used the game, contact us and we will delete the account. If you are under 16 and live in the EEA, ask a parent or guardian before you agree to personalised ads.
Changes
If we change this policy, we update the date at the top. For significant changes, we tell you in the game before they take effect.
Contact
Greener Grass Oy, Business ID 2657088-8, Väinö Linnan aukio 15, 5.krs, 33210 Tampere, Finland — support@greenergrass.company