Privacy Policy

Scope of this Policy

This Privacy Policy applies to Boardgame Craft websites, apps, account registration flows, multiplayer playtesting features, simulator rooms, creation tools, marketplace features, customer support interactions, and related product analytics.

It does not apply to third-party sites, tools, or integrations that maintain separate privacy notices.

Information Boardgame Craft collects

Boardgame Craft may collect account identifiers such as email address, authentication metadata, technical usage information, device and browser details, consent preferences, support communications, and content that you choose to upload, create, generate, or share in the service, including simulator assets, multiplayer room data, and marketplace-related activity.

Boardgame Craft may also maintain records related to credits, free test top-ups, feature usage, and transaction or billing status if paid credit purchases or other paid features are introduced later.

If analytics or preference cookies are enabled, Boardgame Craft may also process session-level interaction information used to understand product usage, diagnose issues, and improve performance.

Marketing and promotional emails

If you separately agree, Boardgame Craft may send marketing emails that include product updates, events, promotions, new feature announcements, credit offers, and similar promotional content.

You may withdraw your consent at any time by using the unsubscribe link included in those emails or by changing your email preferences in your account settings.

Even if you unsubscribe from marketing emails, Boardgame Craft may still send essential service-related emails, including account, payment, security, legal, and service operation notices.

Why Boardgame Craft processes personal data

Boardgame Craft processes personal data to provide the service, authenticate users, secure accounts, persist user settings, operate multiplayer simulator sessions, manage credits and feature access, support creation, storage, export, and marketplace workflows, respond to support requests, detect abuse, comply with legal obligations, and improve product quality.

Where required by law, analytics and non-essential storage technologies are used only with your consent. Necessary technologies remain active because they are required to operate sign-in, security, and consent records.

Legal bases for EEA, UK, and Swiss users

When GDPR-style laws apply, Boardgame Craft typically relies on contract necessity to provide your account and requested features, legitimate interests for security and service improvement, legal obligation where compliance is required, and consent for non-essential analytics or preference technologies when applicable.

You may withdraw consent for optional technologies at any time through Privacy Settings without affecting prior processing that was lawful before withdrawal.

Retention

Boardgame Craft retains personal data for as long as reasonably necessary to provide the service, maintain account integrity, resolve disputes, enforce agreements, and comply with legal obligations. Retention periods vary based on data type, account status, security needs, and operational requirements.

Consent records may be retained for longer where needed to demonstrate compliance.

Sharing and processors

Boardgame Craft may share data with infrastructure, authentication, storage, analytics, customer support, security, communication, marketplace, and payment-related providers acting on behalf of the service operator under appropriate contractual or legal safeguards, when those features are enabled.

Boardgame Craft may also disclose information when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or support a merger, acquisition, financing, or asset transfer.

International transfers

Because service providers may operate in multiple countries, personal data may be processed outside your jurisdiction. Where law requires it, Boardgame Craft will rely on recognized transfer mechanisms such as standard contractual clauses, adequacy decisions, or comparable safeguards.

Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, port your data, or appeal a privacy decision. California and other U.S. state residents may also have rights regarding disclosure categories and sensitive data handling, while EEA, UK, and Swiss users may lodge complaints with a supervisory authority.

Boardgame Craft does not sell personal information for money. If targeted advertising, paid purchases, or similar regulated activities are introduced later, this Policy will be updated before those activities begin where required.

Children's privacy

Boardgame Craft is not directed to children under the age at which independent digital consent is permitted in the relevant jurisdiction. If you believe a child has provided personal data without valid authorization, you should request removal through the designated support or privacy contact channel.

Policy updates

Boardgame Craft may update this Privacy Policy from time to time to reflect service changes, regulatory developments, or operational needs. The current effective date and version are displayed on this page. Material updates will be highlighted through the product or another reasonably prominent channel.