Privacy Policy

Who runs this site

Boardit (playboardit.com) is run by an independent developer. For any privacy question, or to have an account and its data deleted, email privacy@playboardit.com.

What is stored about you

If you make an account, that is an email address and a password, held by our authentication provider. The password is stored hashed and is never visible to us.

If you play as a guest, no email and no password are collected at all. A guest is a temporary anonymous session and nothing more.

Either way, a profile row holds a display name, a handle, a chosen pawn colour, and two preferences: whether animation is on and whether sound is on. When you sit at a table it also records which room you are in, your seat, and when you were last seen there, so the game knows who is still at the table.

Chat messages you send in a room are stored so the rest of the table can read them. Do not put anything sensitive in them.

There is no payment processing on this site, so no card or billing details exist anywhere in it.

Room codes

A five-character room code lets whoever holds it sit at that table, which makes it closer to a password than to a page name. It is deliberately removed from every URL before that URL reaches Google Analytics, PostHog or a search engine — those systems see /room/[code], never the code itself. Rooms are also excluded from the sitemap and blocked in robots.txt.

Cookies and analytics

Necessary cookies. A session cookie keeps you signed in and seated. The site cannot work without it.

Google Analytics (measurement ID G-3RSBST1BKJ) records page views so we know which pages people arrive on and roughly where they came from. It sets its own cookies. It receives the redacted page path described above, and no game content.

PostHog (EU-hosted) records a small fixed set of product events — a game being chosen, a room being created, a match starting. Autocapture is off, session replay is off, heatmaps are off and surveys are off, all set in code rather than in a dashboard. Nothing records your screen and nothing captures the text of what you click.

Google AdSense is loaded so the site can eventually carry advertising. Google and its partners may use cookies to serve and measure ads, including personalised ads based on your prior visits to this and other websites. You can review and change what Google collects at My Ad Center and How Google uses information from sites that use its services. You can opt out of personalised advertising entirely at aboutads.info/choices.

Who your data is shared with

Nobody buys it and nobody is sold it. It reaches only the services that make the site run: Supabase (accounts, game state and chat), Cloudflare (hosting and DNS), Resend (account emails such as verification and password reset), Google Analytics and Google AdSense, and PostHog. Each of those processes data under its own privacy policy.

How long it is kept

Guest accounts idle for more than 24 hours are deleted automatically, every hour. Rooms close after ten minutes of inactivity and are removed with their chat and game state. A registered account and its history are kept until you ask for them to be deleted.

Your rights

You can ask what is held about you, ask for it to be corrected, or ask for all of it to be deleted, by emailing privacy@playboardit.com. If you are in the UK, EU or another region with equivalent law, those rights apply to you regardless of where the site is run from.

Children

Boardit is not directed at children under 13 and does not knowingly collect their data. If you believe a child has made an account, email the address above and it will be removed.

Changes

If this policy changes, the date at the top changes with it. There is no mailing list to announce it on, because there is no mailing list.