Privacy Policy

You play Above Chance without an account. We never ask for your name or email address, we show no ads, and we do not sell or share personal information for advertising.

Who is responsible?

Above Chance is run by Jesko von Dessauer, a sole proprietor in the Netherlands trading as Luami. He is the controller of the personal data described here.

• KVK number: 88447405
• Address:
• Email:

What we collect, and why

• A random number. Instead of an account, the app makes a random number and keeps it on your phone. It says nothing about you or your phone. Our server never stores it, only a key made from it.
• Your casts. Under that key, our server keeps the day, your four symbols and your score, to run the game and the experiment. Until that day’s reveal, it also notes when the cast was made. We publish daily totals only, though on a day with very few casts the totals can show what they were.
• Your history, settings and Practice stay on your phone.
• A check that the app is genuine. To turn away fake requests, the app asks your phone’s maker and Google’s Firebase App Check to confirm it is a genuine copy. Google receives your IP address, basic device details, an ID for this copy of the app and the days it was used.
• Usage statistics. The app reports what it does, such as a cast locked in or a reveal seen, with the app and system version, device model, language and region, how the app was installed, and the month you first opened it. They carry no lasting identifier, no cast and no score, and we never combine them with your casts.
• The answer. To show and check each day’s answer, the app and our recompute page fetch public data from drand’s relays and from Cloudflare. These requests carry your IP address and ordinary request details, nothing about your casts.
• Server logs. Like any server, ours sees your IP address. Google Cloud keeps it in standard request logs.
• Email. If you email us, we receive your address and your message.

This website

In the EU, the EEA, the UK, and California, Colorado, Connecticut, New Jersey and Oregon, the site measures nothing until you choose Allow analytics. Elsewhere it measures from the start, and you can opt out with one click. A Global Privacy Control signal counts as an opt-out everywhere. To know which applies, Cloudflare tells the site which country or state you are in, and nothing is stored.

While analytics are on, to see which pages people read and which links they follow, they record page views, clicks and scrolling, with your browser, device type, language and time zone, and PostHog keeps a random ID for your browser in a cookie. Your choice is kept in your browser. You can change it at any time with Website privacy choices at the bottom of any page.

Our legal bases

Under the GDPR: performing the service when you cast; our legitimate interests in running the experiment, keeping the service secure and working, understanding how it is used, and answering you; your consent for website analytics where the law asks for it; and legal obligations.

Who handles it

• Google Cloud and Firebase run our server, in Frankfurt and the EU.
• Cloudflare hosts this website and the public result files, and runs one of the beacon’s relays.
• PostHog handles the usage statistics of the app and this website, in the EU. It keeps the country from your IP address and discards the address.
• Our email provider holds the email you send us.
• drand’s relays deliver the beacon’s public randomness. They are independent of us.
• Apple delivers the app and helps confirm it is genuine. If you send TestFlight feedback or share crash reports, Apple passes them to us.

Google, Cloudflare, PostHog and our email provider act on our behalf under data processing agreements that require the same protection as this policy. Some processing may happen outside your country or the EEA, under recognised safeguards such as standard contractual clauses. We disclose data only where the law requires it, or to protect people and the service.

How long we keep it

• Casts: until you delete them. A deleted cast can stay in backups for up to 14 days. Google keeps a record of the deletion request, with your old key but no cast, for about six months.
• Published totals: kept as the experiment’s public record. They name no player.
• Server logs: 30 days. App Check data: as Google keeps it.
• Usage statistics: up to seven years.
• In your browser: your choice, for six months where you were asked first, elsewhere until you clear it. PostHog’s ID for up to a year, or until you turn analytics off.
• Email: as long as needed to answer you.
• On your phone: until you delete the app. Your random number, the day of your last cast and the month you first opened the app can outlast it, on your devices or in their encrypted backup.

Deleting your data

In the app’s Settings, tap Delete my data. It deletes your casts on our server and your history on your phone, and the app then makes a new random number.

• A cast deleted between 15:45 and 16:00 UTC still counts in that day’s totals, which are settled when casting closes. It is removed after the reveal.
• If you cast today, your phone still remembers that, so it cannot cast twice in one round.
• Deleting the app does not delete your casts. If the app is gone, install it again: if your random number comes back, Delete my data works as before. Without it, we cannot tell which casts were yours.

For any other request, email us. As there are no accounts, we may not be able to find records that are yours.

Your rights

Depending on where you live, you can ask to access, correct, delete, restrict or receive a copy of your data, object to how we use it, and withdraw consent. You can also complain to your data protection authority. We will not treat you differently for using these rights.

Children, security and changes

Above Chance is not directed at children. If you think a child has given us personal data, contact us and we will delete what we can find.

Connections are encrypted, and only our server and the person who runs it can read or write our database.

When this policy changes in a way that matters, we update this page and its date. Questions are welcome at .