Effective: May 25, 2018
Before you start, we have a few questions for you:
Are you younger than 16? Sorry! You can’t use our websites—click here for more info.
- … in Europe? Check out some info on the EU data protection regulation.
- … in California? Check out some info on your California privacy rights.
- … in Canada? Check out some info on your Canadian privacy rights.
About mobile apps: We do not provide a mobile app. However, our fans sometimes create unofficial BoardGameGeek mobile apps through which you can access our websites. We are not affiliated with any mobile apps and do not know how they handle your personal information. Please read each mobile app’s privacy policies before using it.
|Keep in mind that BoardGameGeek is a software provider. We do not represent any BoardGameGeek users. Rather, we develop an online meeting place for those people to share, trade, shop, and learn. We cannot control how other users handle your information. Please be careful when providing your information to other users.
2. What is personal information?
In basic terms, "personal information
" means information that can directly or indirectly identify you, such as your name, contact information, and in some cases, information about your behavior.
“Personal information” does NOT include information that we have made anonymous so that it can no longer be used to identify you. We collect anonymized data from our users for internal statistical purposes and for providing our services (such as product ratings, top games, and other trends displayed on our websites). We may pass on this anonymous grouped data to third parties, but it will not be associated with your identity.
3. What kind of personal information are you collecting on me?
We collect information from you in three ways:
- you give it to us directly;
- we get it automatically as you use our websites; or
- you give it to another user through our websites.
We only collect as much information about you as is reasonably necessary for us to provide you our services. The table below is a basic summary of what happens to your information. For a more complete list of what we collect, see our USER DATA SUMMARY TABLE.
| What information do we collect?
| When do we collect it?
| How do we collect it?
| Why do we collect it?
| Your email address
| When you register for an account
| You give it to us directly
| To verify that your account is legitimate and to notify you of important announcements.
|Confirmation that you are 16 or older
|When you register for an account
|You give it to us directly
|To verify that you are old enough to have an account, because your registration will be automatically rejected if you are under 16
|Your name and contact information, including email address, physical address and phone number
|When you register for an account or update your account information
When you purchase an item in the BoardGameGeek Store or the Geek Market
When you participate in a trade with another user
|You give it to us directly
You give it to another user through our websites
|To facilitate purchases, trades, and other marketplace transactions
If you entered it into your account, we autofill it into your purchase orders so you don’t have to retype it every time
To email you order confirmations and order updates
To email you direct marketing messages from BoardGameGeek, if you have opted in to them
|Your technical data
-IP address and your location, to the extent it can be identified from your IP address
-web browser information
-make and model of your mobile device
-operating system being used
|When you access our websites
|We get it automatically as you use this website
|To secure our websites and its user accounts
To tie the technical data to your specific account
To remember your user preferences and to evaluate what technical needs we could better meet for our users
To show relevant advertisements for your broad geographic region
|Your behavior on our websites
-activity on our websites
-records of any purchases or trades with other users
-votes in website polls
|When you access our websites
See How are you tracking me? for more information
|We get it automatically as you use this website
|To provide you advertising targeted to your interests, if you consent for us to do so
To maintain transaction records in the case of a dispute between users
To secure your account and our websites
Votes are used to calculate categories, awards, and other classification information.
|Your name, feedback, and/or contact information
|When you contact anyone at the websites.
|You give it to us directly
|To provide and improve our customer service
4. What about the stuff I post publicly or message to other users?
If you register for an account, you will create a public profile. You may include more information on your profile as you desire, such as your full name and location, but remember that it may be accessible to anyone viewing our websites, even if they don’t have an account.
Any content posted on our websites through your account, such as forum posts, wiki pages, product reviews, marketplace listings, comments, collection listings, recorded plays, images, files, or product descriptions, is referred to as your "user contributions". Your user contributions are accessible by anyone who visits our websites. You should not include any sensitive information in your user contributions.
When you send a private message to another user through our websites, including for purposes of trades or Geek Market purchases, we will retain the data and content of the message to provide you with a helpful message thread.
5. I’m a user covered by the EU’s General Data Protection Regulation (“GDPR”).
A. What rights do I have under the GDPR?
You have rights regarding your personal information, including the right to:
- access your information
- change or correct your information
- erase your information
- restrict our use of your personal information under certain circumstances
- obtain your personal information in portable form
- object to our use of your personal information under certain circumstances
- not be subject to profiling that has legal effects on you
B. What is your lawful basis for using my personal information?
There are a couple of reasons we believe we are allowed to collect, use, and store your personal information under the GDPR.
With your consent. When you directly give us personal information for a certain purpose or otherwise express your consent, we can use that personal information for that certain purpose. If you consent for us to do so, we may use your personal information to, for example:
- display your public profile;
- facilitate your trades and purchases;
- personalize and improve the advertisements displayed to you on our website;
- send you our marketing emails; or
- verify that you are over 16 years of age.
You can withdraw your consent at any time. Please contact us if you would like to revoke your prior consent to any of these uses.
For our legitimate interests. However, we do not always need your express consent to use your information. We can use your personal information as needed for our legitimate interests, so long as those interests do not conflict with your fundamental privacy rights and freedoms. These legitimate interests include:
- improving the presentation, operation, and experience of our services;
- evaluating and updating our technical infrastructure; and
- monitoring and improving the information security of our websites.
By contract. A contract also creates a basis for using your information. By accepting our Terms of Service, a contract is formed between us and you so that we may provide you our services. We can use your personal information as needed to provide our services to you under that contract.
Law, protection, or the public good. We can also use your personal information to comply with our legal obligations, protect the vital interests of our users, and as needed for the public good. This may include using your personal information to prevent and handle potential fraud, security breaches or other prohibited activities.
6. How long do you store my information?
If you do not have an account, we will store your personal information as long as needed in the interest of system security, fraud protection, or other legitimate interests.
If you have an account, we will store your personal information and user contributions indefinitely.
Generally, if you delete your account, we will continue to store your personal information for a short time in case of any issues, and then we will delete it in accordance with our standard procedures and applicable law. However, for security purposes, we continue to store your technical data for up to eighteen (18) months after your account deletion.
Generally, if you delete your account, your user contributions will be removed in the same manner as your personal information. However, you should be careful disclosing information publicly or to other users. Although most types of user contributions will be removed upon your account deletion, any content you contributed to wiki pages, game descriptions, or other editable pages will remain public. Also, other users may still be able to access their copy of any private messages you sent to them while your account was active.
Chatroom logs are not stored. That information is deleted shortly after the chatroom closes.
7. Will you use my personal information to contact me?
As needed, we will contact you by email about your account or use of our services. As permitted by law, we may email you to advertise other products or services available from us, or to request that you complete a survey about your use of our services. You may opt out of these communications by clicking the "unsubscribe" link within an email or by contacting us at email@example.com, or just click here.
We will not pass on your personal information to others that want to market to you without your consent.
8. How are you tracking me? Can I stop it?
A. We can see some of what you do in our websites.
We use tracking technology (like "cookies") to track some of what you do while using our websites. Cookies are files sent to your browser from a website or app and stored on your device. We assign a different cookie to each device that accesses our websites. That way, we can provide you with a personalized experience based on your behavior on our websites. A cookie can, among other things, identify you electronically and store your user preferences.
B. Other people can also track you as your use our websites.
If you have any questions about an ad or other targeted content, you should contact the person who placed the ad.
C. You have choices about how you are tracked.
You are always free to block, delete, or disable tracking technologies if your browser, application, or device so permits. However, if you do so, you may not be able to take advantage of certain site features. For more information on how you can block, delete, or disable these technologies, please review your browser or device settings.
If you do not want us to use your personal information to show you targeted ads for games, accessories, and other products or services we think you’d enjoy, you can opt-out by making the change in your privacy account settings
Opting-out of our targeted ads will not prevent third parties from sending you targeted ads. You can opt out of targeted ads served via specific third party vendors by visiting the Digital Advertising Alliance’s Opt-Out page at http://optout.aboutads.info.
D. We are not set up to respond to "Do Not Track" signals.
9. Who else do you share my personal information with?
If you do business with another user, such as a trade or Geek Market purchase, we will pass on the personal information you provide to the other user, such as your name, address, and phone number, as necessary for them to complete the transaction. They are not allowed to use your personal information for any other purpose. Please contact us if another user is using your personal information inappropriately.
Our "partners" are the organizations and people that we work with to better provide our services. As needed, we may send your information to our partners to help us communicate with you, provide customer support, or process your payments to us. Your information may be stored on our partners’ servers inside or outside of the U.S.
Our BoardGameGeek Store platform
Our BoardGameGeek Store shippers
Our payment processors
Our email processor
Our spam filter
Our backup provider
Our backups are stored encrypted by Arcserve. Only we can decrypt the data.
When we need to for legal or security reasons
We may have to share your information with the police, the government, a court, or another person as required by law. Similarly, as allowed by applicable law, we may share your information with third parties as needed to:
- prevent or take action if we suspect someone is:
- breaking the law,
- committing fraud,
- threatening to harm someone, or
- violating our Terms of Service;
- protect the rights, property, or safety of ourselves, our users, or a child;
- protect the safety and security of our website; or
- enable us to take reasonable precautions against liability.
To a new owner of our company
If our business is sold, whether through merger, acquisition, bankruptcy, dissolution, reorganization, or other transaction or proceeding, your personal information may be shared with the acquiring company and their representatives. If so, we will post a notice on this page and the Terms of Service.
With your permission
10. Does my personal information leave my home country?
BoardGameGeek is located in the U.S. If you are outside of the U.S., we will transfer your personal information into the U.S. If you do business with another user, your personal information will be sent to the country in which the other user is located.
11. Can I see what information you have on me?
Yes. You may review your personal information maintained by us. We can provide you with exported files of your information—just ask us.
As required by your applicable state, national, or international law, you may also have the right require us to change or delete your personal information, and/or refuse to permit us from further collecting or using your information.
12. How do I change or delete my information?
You can update some types of information directly within your account settings. If you are unable to change your information within your account settings, please contact us and we will attempt to make the required changes. To protect your privacy and security, we may require you to take certain steps or provide additional information to verify your identity before we provide any information or make corrections. It’s important to remember that if you delete or limit the use of your information, our services may not function properly.
You may delete your account by clicking Delete your account at the bottom of the Account Manager page.
See How long do you store my information? for what happens to your information after your account is deleted.
14. What about information that I receive from other users for trades, Geek Market purchases, and other transactions on your websites?
If you do business with another user, such as a trade or Geek Market purchase, we will pass on to you the personal information they provide, such as their name, address, and phone number, as necessary for you to complete the transaction. Since you are the controller of such data, separately from us, you should inform other users about your privacy practices. In any case, you must abide by privacy laws and respect the privacy rights granted to other users.
You may only use another user’s personal information for transaction-related purposes and for purposes expressly consented by that user. Using personal information of other users for any other purpose violates our Terms of Service.
15. I'm under the age of 16. Can I use your websites?
No. Our website is not intended for anyone younger than 16 years old. You may not create an account, shop, trade, message, give us any information, or interact with us, our websites, or other users in any way.
We do not knowingly collect personal information from children under 16. If we learn we have received personal information from a child under 16, we will remove it (although we may not be able to fully remove the information from our backup system). If you believe we might have a child’s personal information, please contact us.
16. I am a California resident. Do I have any special rights?
Yes. California Civil Code Section § 1798.83, as it may from time to time be amended or superseded, permits California residents to request certain information regarding our disclosure of their information to third parties for their direct marketing purposes. To make such a request, please contact us.
17. I am a Canadian resident. Do I have any special rights?
Yes. Canadian residents have certain rights under Canadian law with respect to their personal data, including the right to request access to, correct, amend, delete, or limit the use of their personal data. Canadian residents also have the right to withdraw their consent to certain of our online tracking programs.
In accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we are responsible for the information of Canadian residents if we transfer it to a third party. Before we send a Canadian resident's information to a third party, that party must agree to handle the information only as we direct them to and to protect the information as least as well as we do.
To exercise any of these rights, please contact us.
18. Who can I contact with questions?
7930 Xavier Ct.
Dallas, TX 75218
Data Protection Officer:
7930 Xavier Ct.
Dallas, TX 75218
If you are located within the European Economic Area, you may also contact a supervisory authority in your home country to report violations of the GDPR.