Privacy Policy
In force since 26 August 2026
We collect what the game needs to work: an account, the numbers on it, what you spent, and what you did in the market. There is no advertising, no third-party tracker, and nothing is sold or shared for anybody else’s marketing. Counting visits is done with a key that is thrown away and regenerated daily, so it cannot be tied back to you.
Some of it is public by design: the numbers you own, your display name, your avatar, your artwork, and what things sold for.
1. Who is responsible
The Thousand Numbers is the data controller for the personal data described here, in the sense of the General Data Protection Regulation (GDPR).
For anything about your data, write to privacy@thethousandnumbers.com. This notice goes with the Terms of Service.
2. What we collect, and why
Grouped by the reason it exists. The right-hand column is the legal basis under Article 6 GDPR.
| Data | Why | Basis |
|---|---|---|
| Account: name, email address, password (stored only as a hash), date of birth, avatar, and the profile picture and account identifier from Google or GitHub if you sign in that way | To create and run your account, to sign you in, and to check you are old enough | Performance of a contract; legal obligation for the age check |
| Game: which numbers you hold or own, when you rolled and bought them, the artwork you put on them, and how frequently you have been rolling | To run the game, to keep one number to one owner, and to pace rolling fairly | Performance of a contract; legitimate interest in preventing automated abuse |
| Market: listings, bids, offers, accepted offers, awards, and completed sales with their prices | To run listings and auctions, to settle them, and to give both sides a history of what happened | Performance of a contract |
| Money: amounts, the ledger of what moved and why, and the identifiers of your customer and payout records at Stripe. We never see or store your card number | To take payment, to pay sellers, to explain a balance, and to keep the accounts | Performance of a contract; legal obligation to keep accounting records |
| Messages: notifications shown in the app, and the single-use links sent by email, of which only a hash is stored | To tell you an auction ended, an offer arrived, or an address change needs confirming | Performance of a contract |
| Technical: IP address and browser user-agent, at the moment of a request | To keep the site up, to pace rolling for signed-out visitors, and to stop abuse | Legitimate interest in the security and integrity of the Service |
| Counting: an event name from a fixed list, the page it happened on, a daily visitor key, and a few numbers about the event | To know how many people play and which parts they use | Legitimate interest in understanding use of our own site |
Where a basis is legitimate interest, you can object: see clause 8. We do not make any decision about you by automated means that has a legal or similarly significant effect.
3. How we count visits
There is no analytics tracker, no advertising pixel and no third-party script on this site. Counting is done by our own server, into our own database.
A visit is recorded against a rotating key: your IP address and user-agent, hashed together with a secret and with today’s date. It is enough to tell two page views apart from two people for the length of one day. Tomorrow the same person produces a different key, and yesterday’s rows cannot be tied to today’s. Nothing is written to your device to make this work, and the IP address itself is not stored in the record.
These counts are used by this site alone. They are never shared or sold, never joined with data from other sites, and never used to target advertising. They are deleted after 396 days, about 13 months, by a job that runs on the same schedule as the game’s own clock.
4. Cookies
The only cookies here are the ones the site cannot work without, so there is no consent banner: the rule a banner answers to is about storing things on your device for purposes beyond running the service you asked for, and nothing here does that.
| Cookie | What it does | How long |
|---|---|---|
| Session | Keeps you signed in between pages | Until it expires or you sign out |
| Device key | Lets a signed-out visitor hold the number they rolled, so it is still there if they make an account | Short-lived; set only when you roll signed out |
| Theme | Remembers light or dark, so the page does not flash on reload | Until you clear it |
Stripe sets its own cookies inside its payment form, for fraud prevention and to make the form work. Those are governed by Stripe’s privacy policy.
5. What other people can see
The Thousand Numbers is a public board. Anyone, signed in or not, can see which numbers you own, your display name, your avatar, the artwork on your numbers, what you have listed, and what your sales went for. Shareable images generated by the site carry the same information and can be reposted anywhere.
Choose a display name and an avatar you are happy to have public. Bids and offers are shown to the seller of that listing; everyone else sees only the top bid and how many there are.
Your email address, date of birth, balances and payment details are never shown to other players.
6. Who else touches it
We do not sell personal data and we do not share it for anybody else’s marketing. It is handled by these service providers, on our instructions and under contract:
| Who | What for | What they get |
|---|---|---|
| Stripe | Card payments, seller payouts, and the identity checks a payout requires | Name, email address, payment details, transaction amountsEuropean Union and United States |
| Vercel | Hosting and delivery of the site | IP address, request metadataEuropean Union and United States |
| Optional sign-in, and the webfonts a customised number can use | Name, email address, profile picture, where sign-in is usedEuropean Union and United States | |
| GitHub | Optional sign-in | Name, email address, profile picture, where sign-in is usedEuropean Union and United States |
The database and the uploaded images are hosted in the European Union. Email is sent through our email provider.
We will also disclose data where the law requires it, to establish or defend a legal claim, or to a buyer of the business if it is ever sold, in which case this notice follows it.
Where a provider is outside the European Economic Area, transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision. Ask us at privacy@thethousandnumbers.com for a copy of the safeguards for any of them.
7. How long we keep it
| What | How long |
|---|---|
| Your account and everything on it | Until you delete it. Deleting is immediate and releases every number you hold. |
| Records of completed sales | Kept after an account is deleted, but with the deleted side detached, so the other party keeps their own history without the record naming you. |
| Payment and accounting records | Up to 10 years, because the law requires books to be kept. |
| Visit counts | 396 days, then deleted automatically. |
| Email confirmation links | 24 hours, and only ever as a hash. The link itself exists only in your inbox. |
| Backups | Deleted data disappears from backups as they age out on their normal cycle. |
8. Your rights
Under the GDPR you can ask us to:
- give you a copy of the data we hold about you, and tell you what we do with it;
- correct it, if it is wrong;
- delete it — most of which you can do yourself from your account page;
- restrict or stop a particular use of it;
- hand it over in a portable format, where we hold it on the basis of a contract or your consent;
- stop relying on legitimate interest, where you object on grounds relating to your situation;
- withdraw consent, where we asked for it, without affecting what came before.
Write to privacy@thethousandnumbers.com. We answer within one month, and may need to check who you are first. Some things we have to keep: a sale that happened, and the accounting behind it, cannot be erased on request.
You may also leave directions about what happens to your data after your death, under Article 85 of the French Data Protection Act, by writing to the same address.
If you think we have handled your data badly, tell us first, and you have the right to complain to a supervisory authority in any case: the Commission Nationale de l’Informatique et des Libertés (CNIL) (https://www.cnil.fr), or the authority in your own country.
9. Security
Passwords are stored only as a hash and never in a form we could read. Email confirmation links are single-use, expire in 24 hours, and are stored only as a hash, so the link works from your inbox and from nowhere else. Card details go to Stripe and never reach our servers. Uploaded images are served through the app rather than from a public bucket.
No system is perfectly secure, and we cannot promise one that is. If a breach puts you at risk we will tell you and the authority within the time the law allows. Keep your password to yourself and use one you use nowhere else.
10. Children
The Service is for adults. We do not knowingly collect data from anyone under 18, and we ask for a date of birth at sign-up for that reason. If you believe a child has an account here, write to privacy@thethousandnumbers.com and we will delete it.
11. Changes to this notice
We may update this notice. The date at the top says when it last changed, and we will tell registered players by email before a change that materially affects them. Continuing to use the Service after a change means you accept the updated notice.