1. Who operates LudoRoam
LudoRoam is operated by Samuel Aidoo. Questions or privacy requests can be sent through the verified contact link @_samuelaidoo on X. Do not post room codes, transfer links, photos, or session credentials publicly.
This policy applies to the public LudoRoam website, online multiplayer service, downloadable desktop and mobile editions, and self-hosted LAN edition.
2. Information we process
| Information | Why it is used |
|---|---|
| Chosen player name, color and optional player photo | To identify you to the other people in your room and display your place on the board. |
| Room code, game state, dice results, house rules, moves and scores | To create, synchronize and restore the multiplayer game. |
| Room chat messages | To show temporary table chat to the people in the same room. |
| Camera/microphone presence and WebRTC signalling | To establish optional peer-to-peer voice and video between players. |
| Session token, player ID, device proof and one-time transfer data | To protect your seat, authenticate game actions, prevent duplicate joins and let you switch devices securely. |
| IP address and request metadata | To operate the network service, apply rate limits, investigate abuse and secure rooms. Hosting providers may also keep standard service logs. |
| Public-site usage and technical error data | To understand feature use, reliability, browser/device type, approximate region and errors. We do not send player names, room codes, chat, photos or transfer secrets as custom analytics events. |
3. Where information is kept
Online rooms
Internet room data is stored in Google Cloud Firestore. A lobby expires after 30 minutes of inactivity, an active game after two hours of inactivity, and a finished game after five minutes. Expired rooms are rejected and scheduled for deletion; provider backups and logs may take longer to cycle out.
LAN and self-hosted rooms
LAN room data is stored on the host device, including in the local SQLite room store where applicable. It is not sent to LudoRoam's public room database. The person operating the host controls that device and its local backups.
Your browser or app
LudoRoam uses local and session storage for your temporary room credentials, selected game server and preferences such as sound, shake-to-roll and camera-panel layout. A short-lived first-party cookie may coordinate game sounds across tabs. Leaving a room removes the active room session; browser settings can clear the remaining preferences.
4. Voice, video and photos
Camera and microphone access is optional and requires your device permission. Media is sent directly between players using WebRTC. LudoRoam exchanges short-lived connection signals but does not record or centrally store the audio or video stream. Other players can still see, hear or independently record what you share, so only enable media with people you trust.
An optional player photo becomes part of the temporary room record and is visible to everyone in that room. Do not upload a photo without the person's permission.
5. Analytics and service providers
On the public production website, LudoRoam uses Google Analytics and PostHog to measure visits, product events and technical errors. These services can use cookies or similar browser storage and receive device/browser information, network information, page activity and approximate location. Optional analytics starts only after you choose Allow analytics.
Analytics does not run in self-hosted LAN games, native apps, local development, preview deployments or pages containing a private device-transfer link. LudoRoam does not use analytics data to determine game results and does not make automated decisions with legal or similarly significant effects.
Google Cloud provides temporary online room storage, and Vercel provides public hosting and server execution. These providers may process information in countries outside your own under their service terms and applicable transfer safeguards.
6. Our reasons for processing
Where data-protection law requires a legal basis, LudoRoam processes core room and session data to provide the game you request; security and limited diagnostics for the legitimate interests of protecting and improving the service; optional photo, camera and microphone data at your direction and with device permission; and public-site analytics with your consent.
LudoRoam does not sell player names, photos, chats or room data. Information may be disclosed when required by law, to protect players or the service, or to the service providers described above so they can perform their contracted functions.
7. Your choices and rights
- Do not add a photo or enable camera/microphone if you do not want to share them.
- Leave a room and clear LudoRoam site data in your browser to remove local session data and preferences.
- Use Privacy choices in the public-site footer to allow or stop future analytics, and clear existing analytics cookies using your browser controls if desired.
- Depending on where you live, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on it.
- You may complain to the data-protection authority where you live, including Ghana's Data Protection Commission where applicable.
Because LudoRoam has no accounts and most room records expire quickly, we may be unable to connect a request to a specific record without enough safe information to locate it. Never send an active player token or transfer link.
8. Children
LudoRoam is a general-audience service and is not directed to children under 13. A child who does not meet the minimum digital-consent age where they live should not submit a photo, use voice/video, or use the online service without authorization from a parent or legal guardian. Contact us if you believe a child supplied personal information improperly.
9. Security and policy changes
LudoRoam uses encrypted connections for the public service, authenticated room actions, limited retention and restricted device-transfer links. No online system is completely secure, so protect room codes and never share an active one-time transfer link with anyone except the intended device.
We may update this policy when the service or law changes. The effective date at the top will change, and material changes will be presented through the website or another reasonable notice.