Privacy Policy
Last updated: October 9, 2026
Service: Smart Craps Table
Privacy contact: Leave a message
1. Overview
This Privacy Policy explains how Smart Craps (“we,” “us,” or “our”) handles information when you use Smart Craps Table (the “Service”).
The Service is a craps-style game and table-management software project. Depending on the version and how it is hosted, it may run locally on a device or be provided through a website or server. The information handled can therefore differ by deployment.
2. Information we may process
Depending on the features enabled, information may include:
- Game and session data: player display names, seat assignments, game events, bets represented in the game, balances, roll results, session statistics, and reconnect codes.
- Technical data: IP address, browser and device details, timestamps, diagnostic events, and server logs collected by the hosting or security infrastructure.
- Account information: your sign-in identifier (for example the Google account name, email address and profile photo that Google shares with us when you choose “Sign in with Google”, or an anonymous guest identifier), your display name, chip balance and a ledger of chip movements (welcome chips, purchases, ad rewards, refunds, game play), and your game history.
- Messages you leave us: what you type on the “Leave a message” page, the topic you choose, any contact detail you choose to add, the time, and your account identifier if you were signed in. We do not publish an email address.
- Payment information: purchases are handled by Stripe and PayPal. Your card or PayPal details go to them, not to us. We receive and keep a record of the purchase (the pack, the amount, a payment reference and whether it was later refunded or disputed).
- Advertising: where ads are enabled, Google AdSense may show a rewarded ad and uses its own technologies (see Sharing and service providers).
Do not enter sensitive personal information into player names or other free-text fields.
3. Local operation and hosting
On your device. The app keeps a few settings in your browser or app storage: your chosen display name and chip style, whether you ticked the agreement box, and your sign-in session (kept by Firebase until you sign out). The pit (admin) PIN is kept only in the tab for the session. When the app runs in demo mode without a server, the demo game is saved in your browser's storage and never leaves your device.
On our server. When you play on smartcraps.app, your account, balance, ledger, game and purchase records are stored in a database on our server (a virtual machine at Google Cloud in the United States, region us-central1), and the server keeps ordinary request logs. Some profile and session-history data is also stored in Google Firestore under our Firebase project.
Camera. The website and the phone or tablet app do not use your device's camera or microphone. Dice recognition with a camera only happens at a physical table, where the table operator runs a camera pointed at the felt and dice; it is not part of the hosted website. If you run the software yourself, the operator of that installation controls its data.
Self-hosting. If someone else runs their own copy of the software, they, not us, are responsible for that installation.
4. How we use information
Where applicable, we use information to:
- Operate game sessions, player seats, reconnect functionality, and game statistics.
- Maintain, secure, debug, and improve the Service.
- Respond to support requests.
- Prevent misuse, investigate incidents, and comply with legal obligations.
- Provide account, subscription, payment, or advertising features only if they are implemented and disclosed for the relevant release.
We do not use your information for cross-site tracking or sell it. Where ads are enabled they are served by Google AdSense, which has its own data practices.
5. Legal bases and purposes
Where privacy law requires a legal basis, we process information on the basis applicable to the relevant activity, which may include providing the requested Service, legitimate interests such as security and reliability, consent, or compliance with legal obligations. The appropriate basis depends on the jurisdiction and the actual processing.
6. Sharing and service providers
We share information with the service providers that help us run the Service, and with authorities or other parties when required by law or necessary to protect rights and safety. We do not sell your personal information and we do not share it for cross-context behavioral advertising.
The providers we use are:
- Google Firebase (Authentication and Firestore): sign-in (Google or anonymous guest) and some profile and session-history data. Firebase privacy information and Google Privacy Policy.
- Google Cloud (hosting): the virtual machine and storage that run the Service, in the United States (us-central1). Google Cloud privacy notice.
- Stripe: card payments for chip packs. Stripe Privacy Policy.
- PayPal: PayPal payments for chip packs. PayPal Privacy Statement.
- Google AdSense: rewarded ads where they are enabled. How Google uses information from sites or apps that use its services.
A provider that receives information acts under its own terms and privacy notice as well as our agreement with it.
7. Retention
We keep information only as long as needed for the purposes in this Policy. On the hosted Service:
- Messages you leave us (including any contact detail you add): deleted automatically after 12 months.
- Product analytics events (if enabled; which screens and actions were used, without your name or email): deleted automatically after 90 days.
- Retry-protection records (they let a repeated tap on a button be recognised so it does not run twice): deleted automatically after about 10 minutes.
- Server request logs: kept in rotating files that are overwritten as they fill (a limited number of files of limited size). We do not archive them.
- Account, chip balance, ledger and game history: until your account is deleted.
- Purchase and refund records: as long as tax, accounting and dispute rules require, even after your account is deleted.
- Data in Firebase Authentication and Firestore: until your account is deleted.
Self-hosted operators control retention for their own installations.
8. Security
We use reasonable measures appropriate to the deployment to protect information. No software, device, or transmission method is completely secure. Operators of self-hosted deployments should restrict network access, protect administrator credentials and reconnect codes, keep software updated, and secure database and backup files.
9. International transfers
Service providers may process information in countries other than your own. Where required, appropriate safeguards will be used for international transfers. Our server runs in the United States, so if you use the Service from elsewhere your information is transferred to and processed in the United States. Google, Stripe and PayPal also process information in several countries under their own safeguards.
10. Your privacy rights
Depending on your location, you may have rights to request access to, correction or deletion of, restriction of, or portability of your personal information, to object to certain processing, or to withdraw consent where processing is based on consent. You may also have the right to complain to a data-protection authority.
To submit a request (to see, correct or delete your data, or to ask a question), leave a message, choose “My data”, and add a way for us to reach you. If you are signed in when you send it, we can find your account faster. Account deletion is handled through this request: we will delete your account and game data, except records we must keep (see Retention). We may need to verify your request and may be unable to fulfill it where an exception applies. Rights and deadlines vary by jurisdiction.
11. Children
The Service is not intended to collect personal information from children in circumstances where doing so would violate applicable law. If you believe a child has provided personal information to a hosted version, leave us a message so we can assess and address the request.
12. Cookies and similar technologies
The website uses browser storage that it needs to work (see the Cookie Policy). Where ads are enabled, Google AdSense may use its own cookies or similar technologies. We do not currently show a cookie-settings control; you can block ad technologies in your browser or with a content blocker, and the game will keep working.
13. Changes to this Policy
We may update this Policy as features and data practices change. We will update the “Last updated” date and provide additional notice where required by law.
14. Contact
Privacy questions and requests: leave a message
Operator: Smart Craps