Privacy Policy

Last updated 14 July 2026

1. Introduction

This Privacy Policy explains how RollPlayRadio ("RollPlayRadio", "we", "us" or "our") collects, uses, discloses and protects your personal information when you use our website and services (the "Service").

The Service is operated by RollPlayRadio, a sole trader based in Queensland, Australia (ABN 96 112 144 798), who is the entity responsible for your personal information. You can contact us at contact@rollplayradio.com.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, where they apply to you, the EU and UK General Data Protection Regulation (GDPR) and other applicable privacy laws.

By using RollPlayRadio, you agree to the practices described in this policy. This policy forms part of our Terms and Conditions.

2. Information we collect

  • Account information. When you create an account, we collect your email address and authentication details through our authentication provider, Supabase.
  • Billing information. Paid subscriptions are processed by Stripe. We do not store your full card details on our servers. Stripe handles payment data under its own privacy policy.
  • Content you create. Mixes, scenes, and anything you choose to publish to the community Tavern are stored so that the Service can function. Scenes you publish to the Tavern may remain available to other users even after you close your account. If you want a published Scene removed, you should unpublish or delete it before closing your account.
  • Communications and support. If you contact us through our contact form or otherwise communicate with us, we collect the name, email address and message you provide, and keep a record of that correspondence so we can respond and improve our support.
  • Product updates. If you opt in, we use your email address to send you occasional product-update emails. You can withdraw your consent at any time using the unsubscribe link in any such email or in your account settings.
  • Usage data. We use privacy-friendly analytics (Vercel Analytics) to understand aggregate, anonymised usage and improve the product.
  • Technical and device data. When you use the Service, we automatically collect technical information such as your IP address, browser and device type, approximate location derived from your IP address, and log data. We use this to deliver, secure and troubleshoot the Service.
  • Discord data. If you choose to use our optional Discord integration, we may receive limited profile identifiers from Discord as permitted by the integration and by your Discord settings.
  • Local storage. We store small preferences (such as panel state and your mix) in your browser to keep the app working smoothly. These are not used to track you across other sites.

3. Cookies and local storage

We use local storage in your browser for essential functionality, such as remembering your panel state and your current mix. Our analytics provider is privacy-friendly and does not use tracking cookies to identify you across other websites. If we introduce any non-essential or advertising cookies in future, we will update this policy and seek your consent where required by law.

4. How we use your information

We use your information to:

  • provide, maintain and operate the Service;
  • authenticate you and manage your account;
  • process subscriptions and payments;
  • respond to your support requests and communications;
  • keep the Service secure and prevent fraud and abuse;
  • understand usage and improve RollPlayRadio over time; and
  • comply with our legal obligations.

We do not sell your personal information.

5. Legal bases for processing (EU/UK users)

If you are in the European Union or United Kingdom, we rely on the following legal bases under the GDPR:

  • Performance of a contract: to provide the Service and perform our contract with you;
  • Legitimate interests: to secure, troubleshoot and improve the Service, where this is not overridden by your rights;
  • Consent: where you have given consent, for example to optional integrations, which you can withdraw at any time; and
  • Legal obligation: to meet legal, accounting and regulatory obligations.

6. How we host your information

We rely on trusted third parties to host and operate RollPlayRadio. Each processes data under its own privacy policy:

  • Supabase: accounts and database;
  • Stripe: payment processing;
  • Bunny CDN: audio and image delivery (logs requesting IP addresses);
  • Vercel: website hosting and privacy-friendly usage analytics;
  • Cloudflare: the Turnstile anti-abuse check shown on sign-in, sign-up and the contact form;
  • Resend: delivery of account and support emails, and product-update emails where you have opted in;
  • Discord: only if you choose to link your account or use our Discord integration.

We may also share information with other users (content you publish to the Tavern is visible to others), where required by law or to protect rights and safety, and in connection with a business sale or reorganisation. We do not sell, and do not "share" for cross-context behavioural advertising (as defined under California law), your personal information.

7. International data transfers

RollPlayRadio is available worldwide, and our service providers may store and process your information in countries other than your own, including outside Australia, the EU and the UK. Where we transfer personal information internationally, we take steps to ensure it is protected by appropriate safeguards, such as standard contractual clauses, where required by law.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated personal data at any time. We may retain certain information for longer where necessary to comply with legal, accounting or security obligations, or to resolve disputes; residual copies in backups are deleted in the ordinary course.

9. Security

We take reasonable technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are at least 13 but under the age of majority in your jurisdiction, you may only use the Service with the consent of a parent or guardian. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will delete it.

11. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.

11.1 Australia

Under the Australian Privacy Principles you may request access to, and correction of, the personal information we hold about you. If you are concerned about how we have handled your information, you can contact us, and you may also complain to the Office of the Australian Information Commissioner (OAIC).

11.2 European Union and United Kingdom

If the GDPR applies to you, you have rights to access, rectification, erasure, restriction, data portability, and to object to processing, as well as the right to withdraw consent. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

RollPlayRadio is established in Australia and has no establishment in the European Union or United Kingdom. Our processing of EU and UK personal data is occasional, does not involve large-scale processing of special-category data, and is unlikely to result in a risk to your rights and freedoms. On that basis we rely on the exemption in Article 27(2) of the GDPR and have not appointed an EU or UK representative. You can reach us directly using the contact details below, and we will update this section if our processing changes.

11.3 California

If you are a California resident, you may have rights to know about, delete and correct your personal information, and to opt out of the sale or sharing of personal information. We do not sell or share your personal information, and we will not discriminate against you for exercising your rights.

12. Data breach notification

If personal information we hold is caught up in a data breach, we act on the notification duties the law places on us. As an Australian operator we are subject to the Notifiable Data Breaches scheme in the Privacy Act: where a breach is likely to cause you serious harm, we will tell you and report it to the Office of the Australian Information Commissioner. Where the GDPR applies to your data, the parallel obligation is to inform the relevant authority within 72 hours when a breach puts you at risk, and to contact you directly when that risk is high. Either way, we will set out what happened and what you can do about it.

13. Automated decision-making

We do not profile you or run your information through automated systems that make decisions about you with legal or similarly significant consequences. The usage data we track is there to run the app, apply the limits of your plan, and protect the Service from abuse, and for nothing else.

14. Changes to this policy

We may update this policy from time to time. We will update the date at the top when we do, and we will notify you of material changes by email or through the Service. Your continued use of RollPlayRadio after changes take effect means you accept the updated policy.

15. Contact

Questions or requests about this policy can be sent to contact@rollplayradio.com.

We use privacy-friendly analytics to understand how RollPlayRadio is used. May we enable them? Essential storage needed to run the app is always on. See our Privacy Policy.