Privacy policy
Last updated: 13 October 2026. This policy explains what happens to information when you use getroliq.com. The service is run by roliq, which decides how this information is used.
In short: most tools work entirely in your browser and send us nothing. Information reaches our servers only when you sign in or use a shared room, and we use it only to run those features.
What stays on your device
Lists, settings, counters, timers and results you make without a shared room are saved in your browser's local storage on this device. We do not receive them, and clearing your browser data removes them.
Secret Santa links carry each result after the # sign of the address, a part browsers never send to a server. The noise meter listens to the microphone inside your browser only to measure loudness; no sound is recorded, stored or sent.
Your account
If you sign in with an email address and password, we store the address and a securely hashed password. If you sign in with Google, Google shares your name, email address and profile picture with us. We use them only to sign you in and to link you to the rooms you own or join.
We do not send newsletters or marketing email. Your address is used for signing in and resetting your password.
Shared rooms
When you create a shared room we store what it needs to work: its title and settings, the entries and names you add, results, the room's live state and a record of actions such as draws and removals, so everyone sees the same outcome.
People who join a room may give a display name, and an email address if the room asks for one. An organiser who lists the names or email addresses of invitees should only list people who expect to take part. We use those addresses only to let the right people in and never write to them.
To count visits to a room and to stop abuse, we keep a one-way hash of the visitor's network address and browser together with the language and the referring page. Rate limits keep a keyed hash of the network address for a short time. Plain IP addresses are not stored in our database.
Cookies
Necessary cookies keep you signed in, remember that you joined a room or unlocked a password-protected room, and may remember your language. These features cannot work without them, so they are set without asking.
Google Analytics cookies (named _ga) are optional and set only if you choose “Allow analytics” in the cookie banner. They show us which tools are used. You can change your choice at any time with “Cookie settings” at the bottom of every page; declining removes them.
Vercel Web Analytics counts page views without cookies and without identifying you.
Services that process data for us
Vercel hosts the site and keeps short-lived server logs. Supabase stores accounts, rooms and the records described above. Google provides Google sign-in and, only with your consent, Google Analytics. Each works under its own data processing terms and may store data outside your country.
We do not sell personal data and do not use it for advertising.
How long we keep it
Rooms and their records stay until the owner deletes them or the account is deleted. Rate-limit records expire with their time window. Error reports, which can include the page address and, for signed-in people, the account email, are kept only as long as needed to fix problems.
Your rights
Depending on where you live, you can ask to see, correct, export or delete your personal data, object to its use or withdraw your consent. Room owners can delete rooms and remove participants themselves; for anything else, including deleting your account, contact roliq. You can also complain to your data protection authority.
Accounts are meant for adults who organise rooms. Pupils and other participants can join a room with a first name or a nickname, without an account.
Contact and changes
roliq operates getroliq.com and is responsible for this policy. When the policy changes, the date at the top changes too, and significant changes are announced on the site.