Legal
Privacy notice
Last updated 7 September 2026
EpicYatzy is a free browser game with no accounts. We process the smallest amount of data needed to seat you at a table with other players, and we delete it when the table closes. This notice explains what that means under the EU General Data Protection Regulation (GDPR).
Who is responsible
The controller is Norbert Laszlo, a private individual based in Sweden who runs EpicYatzy as a non-commercial project. Contact: hello@norbertlaszlo.com. See also the terms of use, section 10.
What we process, why, and for how long
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| The guest name you type (up to 20 characters) | Show who is at the table | Providing the game you asked for, GDPR Article 6(1)(b) | Until the room is deleted |
| Room name and settings (up to 40 characters) | Create, list and run the room | Article 6(1)(b) | Until the room is deleted |
| Reconnect credential (a random secret; the server stores only a hash) | Let you rejoin your seat and allow one connection per seat | Article 6(1)(b) | Until the room is deleted |
| Game state: dice, scores, cards, emotes | Run the match and recover it after a server restart | Article 6(1)(b) | Until the room is deleted |
| Your IP address | Deliver the connection and limit room creation and password attempts | Our legitimate interest in keeping the service working, Article 6(1)(f) | At most 60 seconds in server memory; never written to logs |
A room is deleted 30 minutes after its last activity, or 24 hours after its last activity while a game is in progress or paused. Deleting a room deletes everything in it. We keep no profiles, match history, or account records.
Where the data is
The game server and its database run in data centres within the European Union, operated by a cloud hosting provider that acts as our processor under a data processing agreement. Data is not transferred outside the EU/EEA.
What stays in your browser
We do not use cookies, analytics, advertising, or third-party scripts. The game keeps a few values in your browser's local storage: your guest name so you do not have to retype it, your sound, motion and emote preferences, and the reconnect credential for each room you join. These exist only to provide functions you asked for. You can remove them at any time by clearing this site's data in your browser.
Children
EpicYatzy has no age limit and does not ask for your age. We process the same minimal data for every player and never rely on consent, so no parental consent is needed.
Your rights
You may ask for access to, correction or deletion of your data, restriction of processing, portability, and you may object to processing based on legitimate interest. Because we know you only by a guest name in a temporary room, tell us the room code and the name you used when you contact hello@norbertlaszlo.com. In most cases the room will already have been deleted.
You may complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), or to the data protection authority in the EU country where you live.
Changes
If the game starts processing more data, for example if analytics or accounts are added, we will update this notice and the date at the top before the change goes live.