Updated September 20, 2026. This policy describes the free game, optional competition accounts, and links to our printable kit.
Casual play stays on your device.
The home-page game stores dice, held dice, throws, completion status, and your personal best in your browser’s local storage. Those casual scores are not uploaded or entered on a leaderboard. Clear this site’s browser data to remove them. Practice does not require an account.
An email code saves your seat.
Competition accounts are for players aged 13 and over. We use your email address to send a one-time sign-in code through Resend. We do not subscribe you to marketing. Our application database stores a secret-key-derived account identifier instead of your plain email address. This is pseudonymous account data, not anonymous data. Resend processes the recipient address and email delivery information under its own policy.
Codes expire after 10 minutes, can be used once, and are stored as keyed hashes. The essential fourthrows_session cookie keeps you signed in for up to 30 days. It is HTTP-only and secure over HTTPS. Signing out revokes that session; deleting your account revokes every session.
What other players can see
Banking a ranked round publishes your nickname, final score, and throw count. The daily board shows today’s scores; the seven-day board adds daily scores. Your email and sign-in details are never part of either board. A nickname change applies to future results and matches.
Anyone with a match link can see its nicknames and progress, and can take an open seat after signing in. Treat the link as an invitation and share it carefully. Each player’s dice are private to that player. Both final scores appear after both players finish. Matches are not listed on the public leaderboard.
Storage, security, and retention
We use private Vercel Blob storage for account profiles, sessions, ranked turns, results, match rooms, sign-in code hashes, and abuse-prevention counters. Rate-limit identifiers derived from IP addresses or accounts are keyed hashes. Vercel also processes connection information such as IP address and browser details to deliver and protect the website, and may keep provider logs. See Vercel’s privacy policy.
Daily turns and boards are eligible for deletion after eight days. Friend challenges expire after seven days. Live lobbies expire after one hour; once a second player joins, the match lasts 20 minutes. Expired codes, rate-limit records, sessions, and rooms are removed by scheduled daily cleanup. Removal can take an additional day or longer if a cleanup run fails. Profiles remain until you delete the account.
Your choices and account deletion
Use Compete → Manage account to change your public nickname or delete your competition account. Deletion immediately disables access and hides results and matches, then removes the stored records. Interrupted removal is retried by scheduled cleanup. Deleting a shared match removes it for both players. A minimal account identifier and deletion date remain for eight days to finish cleanup and prevent restarting ranked attempts; you can create a fresh account after that cleanup. Provider logs and email delivery records follow those providers’ retention policies.
Clearing browser data signs you out locally but does not delete server records. If you lose access to your inbox, you will not be able to sign in with that address. Do not put contact details or other sensitive information in your public nickname.
No advertising trackers
We do not use advertising cookies, third-party analytics scripts, or sell personal information. Fonts are hosted with the site. Sharing buttons only copy text when you click; nothing is posted automatically.
Purchases
Our purchase link opens Gumroad. Gumroad handles checkout, payment information, receipts, and download delivery under its privacy policy. This website does not receive your payment card details.