Privacy Policy

1. Who we are

This Privacy Policy explains how Game Night for Board Gamers ("Game Night", "we", "us", or "our") collects, uses, stores, and shares personal information when you use our website at https://game-night.xyz, our related web services, and our mobile applications for Android and iOS (together, the "Service").

For privacy questions or requests, contact us at privacy@game-night.xyz.

2. Scope

This policy applies to personal data processed through the Service. It is intended to meet the disclosure expectations of the Apple App Store and Google Play, and to help users understand their privacy choices. Where local laws provide additional rights (for example under UK GDPR / EU GDPR or similar frameworks), we will honour those rights as described below.

3. Information we collect

Depending on how you use the Service, we may process the following categories of data:

Account and identity data

• First name and last name
• Email address
• Password (stored only as a one-way hash; we cannot read your plain password)
• Email verification and password-reset status

Game night content you create

• Game night / group name
• Player names, colours, and roster settings
• Game library entries, including titles imported from BoardGameGeek where used
• Optional box art or photos you upload
• Play sessions, finishing positions, points, notes, and season standings
• Game wheel picks and related settings

Technical and usage data

• Authentication session / access tokens needed to keep you signed in
• Basic server logs (for example IP address, timestamps, and request metadata) generated by our hosting provider for security, reliability, and abuse prevention
• Device and app technical information reasonably required to operate mobile clients (for example app version and operating system)

We do not intentionally collect sensitive categories such as precise continuous location tracking, contacts, health data, financial account numbers, or government ID numbers. We do not sell personal information.

4. How we use information

We use personal data to:

• Create and manage your account and game night
• Authenticate you and protect account access
• Send transactional emails such as email verification and password reset messages
• Provide core product features (standings, library, history, scoring, game wheel)
• Store and display content you choose to add to your game night
• Maintain security, prevent fraud/abuse, troubleshoot issues, and improve reliability
• Comply with legal obligations and enforce our terms

We do not use your personal data for third-party advertising networks, and we do not currently run behavioural advertising inside the Service.

5. Legal bases (where applicable)

Where required by applicable law, we process personal data on one or more of these bases:

• Contract — to provide the Service you request (account creation, gameplay tracking, support)
• Legitimate interests — to secure, maintain, and improve the Service in ways that do not override your rights
• Consent — where we ask for it (for example optional uploads or communications beyond essential transactional mail)
• Legal obligation — where we must retain or disclose information to comply with law

6. How we share information

We share personal data only as needed to operate the Service, with service providers acting on our instructions, or when required by law. Typical processors / service providers include:

• Hosting and infrastructure (for example Vercel and database hosting) to run the website, API, and store application data
• Email delivery (for example Resend) to send verification and password-reset emails
• File/object storage (for example Vercel Blob) when you upload game images
• BoardGameGeek when you choose to search or import game metadata; requests are made to retrieve publicly available game information you select
• App stores / platform providers (Apple, Google) in connection with distribution, crash/diagnostics tools they provide, or store compliance processes

We may also disclose information if reasonably necessary to protect rights, safety, or security; to respond to lawful requests by public authorities; or in connection with a merger, acquisition, or asset transfer (in which case we will take reasonable steps to keep protections in place).

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising.

7. International transfers

Our service providers may process data in the United Kingdom, European Economic Area, United States, or other countries. Where required, we rely on appropriate safeguards for international transfers (such as standard contractual clauses or equivalent mechanisms offered by our providers).

8. Retention

We retain account and game-night data for as long as your account remains active and as needed to provide the Service. We may retain limited records afterwards where required for security, dispute resolution, backups, or legal compliance, and then delete or anonymise them when no longer needed.

Authentication tokens used for email verification and password reset are time-limited and intended for single use.

9. Security

We take reasonable technical and organisational measures to protect personal data, including hashed passwords, access controls, encrypted transport (HTTPS), and tenant-scoped data separation between game nights. No method of transmission or storage is completely secure; please use a strong unique password and contact us promptly if you suspect unauthorised access.

10. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe a child has provided personal data, contact privacy@game-night.xyz and we will take appropriate steps to delete it.

11. Your rights and choices

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated personal data
• Object to or restrict certain processing
• Request a portable copy of data you provided
• Withdraw consent where processing is based on consent

You can update some information directly in the Service. To request deletion of your account and personal data, use our data deletion request form or email privacy@game-night.xyz. We may need to verify your identity before fulfilling a request. You may also have the right to lodge a complaint with your local data protection authority.

12. Cookies and similar technologies

The website uses cookies or similar technologies that are necessary for authentication and secure session management. We do not use third-party advertising cookies. Mobile apps store authentication tokens securely on-device to keep you signed in.

13. Third-party links and services

The Service may link to third-party sites or services (including BoardGameGeek or app store pages). Their privacy practices are governed by their own policies, not this one.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Material changes may also be communicated through the Service or by email where appropriate. Continued use of the Service after an update means you acknowledge the revised policy.

15. Contact

For privacy questions, requests, or complaints, contact:
Email: privacy@game-night.xyz
Website: https://game-night.xyz