Privacy Policy

Marralhinha Online
Effective date: September 30, 2026

Marralhinha Online ("the game") is a free-to-play hobby project with an optional cosmetic Supporter Pack, made and run by Ryan Polasky ("I", "me"). This policy explains what the game collects, why, and what you can do about it. The short version: the game keeps what it needs to save your progress and verify optional purchases through Discord; there are no ads or trackers.

What the game collects

When you play as a guest

The first time you open the game, a guest account is created for you automatically. It stores:

• A random account ID
• The display name you pick (or a randomly generated one)
• Your game progress: Marbucks balance, XP and level, games played, wins and captures, lootboxes opened, daily bonus streak, the cosmetics you own and the ones you have equipped
• When the account was created and last used
• A login token, so the game remembers you. Only a one-way hash of this token is kept on the server.

When you log in with Discord (on the website or as a Discord Activity)

The game asks Discord for the identify permission only. From that, it stores:

• Your Discord user ID
• Your Discord username or display name (used as your in-game name when a new account is created)
• Your Discord avatar ID

The game does not get your email address, friends list, servers or messages. Discord access tokens are only used at login to look up your profile and are never saved on the server. If you log in with Discord after playing as a guest, your guest progress is merged into your Discord-linked account.

If you buy the Supporter Pack or the Halloween Pack, the server asks Discord whether your account has an active entitlement for the pack's SKU and stores the entitlement ID while access is active. The game does not receive or store your payment card details. Discord handles checkout and payment under its own privacy policy.

While you play

• Live game state (the board, rolls, moves, reactions, chat messages and room codes) is kept in the server's memory only while a room is active, and is discarded after the room goes idle. Chat messages are never written to the database.
• Your IP address is used briefly, in memory only, to limit how many guest accounts can be created from one network. It is not stored in the database.
• The server may keep basic error logs to help fix bugs. The hosting provider may also keep standard access logs (such as IP addresses and request times).

Stored in your browser

The game keeps three items in your browser's local storage: your login token, the room you were last in (so a refresh puts you back), and whether sound is muted. The game does not use cookies, analytics, advertising or tracking scripts, and its fonts are served by the game itself rather than by a third party.

How your information is used

To run the game: saving your progress and cosmetics, showing your name, level and cosmetics to other players at your table, paying out rewards, checking optional Supporter entitlements, preventing abuse, and fixing problems.

Who can see it

• Other players at your table can see your display name, level, equipped cosmetics, what you do in the game (rolls, moves and reactions), and the chat messages you send. Please don't share personal information in chat.
• Discord handles login, optional Supporter checkout and entitlement verification and, when you play inside Discord, runs the Activity. Discord's own Privacy Policy applies to that.
• Service providers that host the game may process data on my behalf.
• Legal requests: I may share information if the law requires it.

I never sell or rent your information.

How long it is kept

Account data is kept until you ask me to delete it, or until I shut the game down. Guest accounts that have not been used in a long time may be removed. In-game rooms are deleted from memory once they have been inactive.

Your choices

• Delete your data: email me at [email protected] and I'll delete your account and progress. For a Discord-linked account, include your Discord username so I can find it.
• Guest accounts: clearing your browser's site data signs you out and abandons the guest account.
• Disconnect Discord: you can remove the game's access at any time under Discord's User Settings, in Authorized Apps.

Children

The game is not directed at children under 13, or under the minimum age to use Discord where you live. If you believe a child has given the game personal information, email me and I'll delete it.

Security

Login tokens are stored only as hashes, and the game only asks Discord for the minimum permission it needs. No online service is perfectly secure, but I try to keep things tight.

Changes to this policy

If this policy changes, I'll update it here and change the effective date above. Continuing to play after an update means you accept the new version.

Contact

Questions? Email [email protected].