Who operates this site
RollBrief is an independent editorial desk based in Melbourne, Victoria, Australia, publishing written assessments of free match-3 puzzle games for Android. In this policy “RollBrief”, “we” and “us” mean the operator of the website at rollbrief.com; “you” means any visitor to that website.
Questions about this policy, or about personal information we hold, can be sent to editor@rollbrief.com. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
What we collect
We keep collection to the minimum needed to run and improve the site.
- Technical log data — IP address, browser user-agent string, referring page, requested URL, date and time of the request. Generated automatically by our hosting provider for every visit.
- Cookies and similar identifiers — small files and browser storage entries set by us and by third-party services. Categories, purposes and retention periods are described in our cookie policy.
- Form data — the name (optional) and e-mail address you type into the sign-up form, together with the fact that you ticked the consent box and the time you did so.
- Plus membership data — if you join the Plus list, your e-mail address, the state of your membership (requested, confirmed, active, cancelled) and the dates it started and ended. We keep this so we know who the digest goes to and for how long. Payment details are never part of it: card numbers and other payment credentials are handled by an external payment provider and are not received or stored by this site.
- Push notification identifiers — if you allow browser notifications, a subscription identifier is created by your browser and stored by our push provider. It is a device-level identifier and is not linked to your name unless you also submit the form.
- Correspondence — the content of e-mails you send to us and the address they came from.
We do not ask for a telephone number or a postal address, we do not handle payment details on this site, and we do not knowingly collect information from children under 15 years of age.
Why we collect it and on what basis
- Operating the site — log data lets us deliver pages, keep the service secure and diagnose faults. This supports our legitimate function of running the website.
- Consent — the sign-up form, push notifications, and any analytics or advertising cookie run only after you have given consent, which you may revoke at any time.
- Running a Plus membership — where you have asked to join, we use your address and membership state to confirm a seat, send the digest you have paid for, and stop sending it when you cancel. This is the information we need to provide the service you asked for.
- Audience measurement — aggregated statistics tell us which entries are read, so we can decide what to cover next.
- Advertising — third-party networks may use cookies to measure and present advertising for free games. Details sit in the cookie policy.
- Correspondence — to answer corrections, listing requests and enquiries.
How long we keep it
| Category | Retention |
|---|---|
| Server log data | Up to 12 months, then deleted or aggregated beyond identification |
| Sign-up form data | Until you unsubscribe or ask for deletion, and no longer than 24 months of inactivity |
| Plus membership data | For as long as the membership runs, then up to 24 months after it ends so we can answer questions about it |
| Push subscription identifiers | Until you revoke notification permission or the subscription expires |
| Cookies and browser storage | As stated in the cookie policy — session cookies end with the session; persistent entries run to 24 months at most |
| E-mail correspondence | Up to 24 months after the exchange closes |
Who we share it with
We do not sell personal information and we do not disclose it for any purpose unrelated to those set out above. Information is shared only with the service providers we need to run the site:
- Hosting and content delivery — the provider serving these pages processes log data and IP addresses on our behalf.
- OneSignal — our processor for browser push subscriptions and for e-mail addresses submitted through the sign-up form. OneSignal stores the subscription identifier, the address and the state of a Plus membership, and sends the messages you have consented to receive.
- Payment provider — once memberships go live, an external provider will take the payment under its own terms and hold the payment details. It tells us only whether a membership is in good standing; the card data never reaches this site.
- Advertising networks — where advertising is displayed, the network may set its own cookies and receive technical data such as IP address and user-agent.
- Audience measurement providers — aggregated usage statistics, only after consent.
Some of these providers operate servers outside Australia, including in the United States and the European Union. Where personal information is disclosed to an overseas recipient, we take reasonable steps under APP 8 to ensure the recipient handles it consistently with the Australian Privacy Principles.
Cookies
Cookies and browser storage are covered separately, including how to refuse or clear them, in our cookie policy. The notice at the bottom of the page records your choice locally in your browser so you are not asked again on every visit.
Your rights
Under the Privacy Act 1988 and the Australian Privacy Principles you may:
- ask for access to the personal information we hold about you (APP 12);
- ask us to correct information that is inaccurate, out of date or incomplete (APP 13);
- revoke a consent you previously gave, including for the mailing list, for a Plus membership and for push notifications;
- ask us to delete information we no longer need to hold;
- deal with us anonymously or under a pseudonym where it is lawful and practicable (APP 2) — reading the site requires no identification at all.
Send any of these requests to editor@rollbrief.com. We reply within 30 days. If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, which oversees compliance with the Privacy Act 1988.
Push notifications can also be switched off directly in your browser settings for this site, and every message we send to a mailing list address carries an unsubscribe link.
Security
The site is served over HTTPS. Access to form submissions and to the push subscriber list is restricted to the people who run the desk, and our providers are chosen on the basis of their published security practices. No transmission over the internet can be guaranteed as completely secure, but we take reasonable steps under APP 11 to protect information from misuse, interference, loss and unauthorised access.
Changes to this policy
If this policy changes, the revised version is published on this page with a new “last updated” date. Material changes affecting how we use information already collected will be announced on the main page before they take effect.