Roster Riddle privacy policy

Effective 31 October 2026. Applies to the pre-release game and its optional statistics.

Roster Riddle is published by Sjouheim, Denmark. Contact: sjouheim@takrye.com.

Your café stays on your device

No account, name, email address or other personal information is required to play. Staff names and personalities are fictional game characters. Progress, equipment, schedules and settings are saved locally, with recovery copies. Reset game permanently erases local game data and recovery copies after confirmation. Operating-system backups and copies you exported are outside the game's control. Store purchases remain restorable through the same store account.

Optional game statistics

Statistics are off until you explicitly choose to share them. With consent under GDPR Article 6(1)(a) and device-storage rules, Sjouheim uses bounded numeric totals to improve enjoyment, pacing, balance, performance and the value of offers. Refusing or withdrawing does not change play, prices, purchases or rewards. We offer statistics only to players who confirm that they are at least 18; players below that age can play without statistics. The game is not directed at children under 13.

Totals include foreground sessions and duration; completed days and weeks; game money earned and spent; staffing, scheduling and opening-hour choices; equipment, furniture and café purchases; coffee menu, welcome strategy, coaching and bonus reactions; encountered incidents, festival choices and granted rewards; screen openings, ad outcomes, verified purchase/restore outcomes; and technical performance/error counts. Large game-money amounts are rounded to whole game dollars. These are fictional game currency statistics, not real payment amounts.

No player, account, advertising, persistent device or installation identifier, name, receipt, payment details, free text, complete save, ordered action history, exact tap coordinates or individual event timestamps is sent to Pulse. Each aggregate batch has a fresh random retry identifier, UTC reporting date and game/platform label. The host necessarily receives IP and connection metadata. Aggregation is not a guarantee of anonymity, especially with small groups.

Who receives data and how long

Our Sjouheim Pulse system, hosted on Microsoft Azure, combines contributions into private daily game/platform totals for Sjouheim. The documented deployment is in North Europe. Microsoft is the hosting processor; its services may involve processing outside the EEA under applicable data-protection terms and transfer safeguards. Microsoft privacy statement.

Unsent aggregate batches stay on the device for at most seven days, with a maximum of 100. Combined statistics and private archives are retained for long-term game analysis. Duplicate-prevention receipts expire after the accepted retry period. Application request tracing is disabled; Microsoft's platform may retain operational/security metadata under its policies. No individual player history or readable individual contribution is retained by Pulse.

Your choice and rights

Use Settings → Game statistics to withdraw. Collection stops, pending requests are cancelled and unsent batches are deleted. A request already received cannot be recalled. Without an individual identifier, we cannot isolate your contribution from an already combined total. Consent is remembered locally for at most 180 days and expires when the notice changes. If the device prevents saving a withdrawal, the game explains the session-only limitation and blocks sending while consent cannot be reliably saved.

You may request access, correction, erasure, restriction or portability, object where applicable, and withdraw consent without affecting earlier lawful processing. Contact sjouheim@takrye.com. We explain what we can identify without creating a player identifier solely for statistics. You may complain to Datatilsynet or the authority where you live. There are no automated decisions with legal or similarly significant effects.

Ads and purchases

Statistics consent does not authorize personalised advertising or cross-app tracking. The current review build has no real advertising or billing provider connected. Before a production provider is introduced, its recipients, data practices, retention, transfer safeguards and consent/age handling must be disclosed here and in the relevant store declarations. Payment providers handle payments; the game does not see card or bank details. Optional statistics record verified outcome counts without receipts or payment amounts. Ad Free ownership and rewards never depend on statistics consent.

Changes

The notice will be updated when data practices change. New purposes require a new choice before collection. This pre-release notice does not itself authorize a production launch.