Privacy policy

What we store on your device

Without your Allow extras choice we set no tracking cookie at all: the analytics tag runs in Consent Mode v2 with analytics_storage denied, so gtag.js sends only a cookieless ping that carries no identifier and no cookie is stored. After an Allow extras choice, Google Analytics sets the _ga and _ga_STB18GGY0M first-party cookies on rngdle.top. The consent record itself is localStorage, never a cookie. Global Privacy Control and Do Not Track override Allow extras and force analytics_storage to stay denied. The same choice gates Microsoft Clarity: its loader runs only after Allow extras, so a visitor who never allows extras, or who sends Global Privacy Control or Do Not Track, makes no clarity.ms request at all, and choosing Reject later keeps it out of the next page you load. Cookie settings in the footer reopens the choice. Rejection removes the sandbox history, any active optional iframe, and returns analytics_storage to denied. Tools still work without saving a history. No embed loads automatically after consent: click its poster or Load official game as well.

Scripts and embeds

• Google Analytics 4 is the only third-party script in the page head: gtag.js from www.googletagmanager.com, measurement ID G-STB18GGY0M (property 557102981, web stream 15940606992, account game_websites). A local Consent Mode v2 queue sets ad_storage, ad_user_data, ad_personalization, and analytics_storage to denied before the config call and enables ads_data_redaction, so nothing identifiable is measured until you allow extras. If you allow, reports are sent to www.google-analytics.com (or a regional host such as region1.google-analytics.com); the ad categories stay denied and we request no advertising script.
• Microsoft Clarity (Microsoft): only after Allow extras, a short loader pulls the Clarity SDK from scripts.clarity.ms and reports to a *.clarity.ms/collect endpoint (the ingest subdomain varies, for example e.clarity.ms). Project yr8jj6zjwi, created for this domain only. Clarity builds heatmaps and session recordings, masks form input and other sensitive content by default, and writes the first-party cookies _clck (about a year) and _clsk (about a day). Rejecting, a Global Privacy Control or a Do Not Track signal keeps the loader from running, so rngdle.top makes no clarity.ms request unless you allow extras.
• YouTube (Google): only after Allow extras and a video-poster click, an iframe loads from www.youtube-nocookie.com. Measured player requests also use www.google.com, fonts.gstatic.com, www.gstatic.com, jnn-pa.googleapis.com, i.ytimg.com, yt3.ggpht.com, and a googlevideo.com video-delivery host. Google receives the player request, including IP and browser information; privacy-enhanced mode does not mean zero data collection. We do not control the player’s own consent UI.
• RNGdle: only after Allow extras and Load official game, an iframe loads https://www.rngdle.com/. Its own privacy policy governs game sessions, hashed email magic links, roll history, and hashed IP/user-agent records. Cloudflare provides its network service. We do not receive your roll or game login details. An ordinary link does not embed the destination.
• Fonts are files shipped with this site (Space Grotesk and Space Mono). They are not requested from a font CDN at view time.

Ads, Do Not Track, and your rights

We do not run personalized ads, and ads.txt declares no seller because there is no ad seller on this site. A Do Not Track signal and a Global Privacy Control signal are treated as reject. Email [email protected] for privacy requests. Cloudflare Email Routing forwards correspondence to our configured mailbox; the receiving mail provider is Google Gmail. They process the message, sender address, and mail headers to deliver it. We keep correspondence only as long as needed to handle the request, then delete it. Legal bases: necessary storage for your privacy choice, consent for optional history and embeds, and legitimate interest in answering email.

Controller: rngdle.top, https://rngdle.top. Contact: [email protected]. Changes to this policy show up as a new updated date on this page. Aliases /privacy-policy/, /cookie-policy/, and /cookies/ redirect here.

What I checked myself

I checked the built pages for third-party script tags before publishing this text. The HTML loads exactly one third-party script, the Google Analytics 4 tag (gtag.js, measurement ID G-STB18GGY0M) on www.googletagmanager.com, and it is denied all storage by default. Microsoft Clarity (project yr8jj6zjwi) is held back the same way: its session-recording loader runs only after Allow extras, so the initial HTML contains no clarity.ms script request. YouTube and the rngdle.com game are iframes created only after a click. The two localStorage keys below are the only ones this site writes before you allow extras.