PRIVACY POLICY
Effective date: 2026-09-03 Last updated: 2026-09-03
The short version
We're a small game company. We collect email addresses so we can tell people how our games are coming along and let them know when we launch a crowdfunding campaign. We also take a few orders for hand-made copies of our games.
We do not sell your personal information, and we don't share your email address with other companies for their own marketing. When we cross-promote another designer's or publisher's game, we do it inside our own newsletter — your address stays with us. If that ever changes, we'll ask your permission first, separately, and you'll have to say yes.
That's the summary. The full policy below is the binding version.
1. Who we are
Boardgamer Games, LLC ("Boardgamer," "we," "us," "our") operates www.boardgamer.com (the "Site"). We're the controller of the personal information described in this policy.
Boardgamer Games, LLC 4142 Adams Avenue, Suite 103-561 San Diego, CA 92116 Privacy contact: privacy@boardgamer.com
2. What this policy covers
This policy explains what personal information we collect through the Site, why we collect it, who we give it to, how long we keep it, and what choices and rights you have. It applies to the Site and our email communications.
It does not cover third-party services we link to — crowdfunding platforms, retailers, social media, or partner publishers. Those have their own policies, and you should read them.
3. Information we collect
3.1 Information you give us
What
When
Required?
Email address
Joining our email list; contacting us
Required to join or to get a reply
First name or display name
Joining our email list
Optional
Name, shipping address, billing address
Placing an order
Required to ship your order
Phone number
Placing an order
Optional — it only helps a carrier resolve a delivery problem
Order contents and history
Placing an order
Automatic part of the order
Message content
Emailing us or using a contact form
Whatever you choose to send
Feedback, reviews, game ideas
If you send them
Optional
3.2 Information collected automatically
When you visit the Site, our hosting platform and analytics tools collect standard technical information:
-
IP address (and the approximate city/region it suggests)
-
Browser type, device type, and operating system
-
Pages you viewed, how you got here (referring site or link), and how long you stayed
-
Cookie and similar identifiers
3.3 Information from email tracking
Our email platform records standard engagement data: whether a message was delivered, opened, and which links were clicked. We use it to tell what people find useful and to stop emailing addresses that have gone dead.
3.4 What we do not collect
-
We never see or store your full payment card number. Payments are handled by our payment processor.
-
We don't collect Social Security numbers, government ID numbers, precise geolocation, biometric data, health information, or any other "sensitive personal information" as defined by California law. We don't want it and we don't ask for it.
-
We don't run advertising pixels that build profiles for other advertisers' use.
4. Why we use your information
Purpose
Examples
Legal basis (EU/UK visitors)
Send you the updates you asked for
Development news, game announcements, crowdfunding launch notice
Consent
Fulfill and support orders
Process payment, ship your game, handle returns and questions
Performance of a contract
Run and improve the Site
Fix errors, see which pages people actually read, keep the Site secure
Legitimate interests
Understand our audience
Aggregate stats on subscribers, opens, and page views
Legitimate interests
Comply with the law
Tax and sales records, responding to lawful requests
Legal obligation
Protect our rights
Prevent fraud, abuse, and IP infringement
Legitimate interests
We won't use your information for a materially different purpose without telling you first.
5. We do not sell your information
To be specific, in the language these laws use:
-
We do not sell personal information for money or other valuable consideration.
-
We do not "share" personal information for cross-context behavioral advertising (the California term for ad-targeting data flows).
-
We have not sold or shared personal information in the preceding 12 months.
-
We do not sell or share the personal information of anyone under 16. (Our email list is 16+; see Section 11.)
-
We do not use or disclose sensitive personal information beyond the limited purposes permitted by law, because we don't collect it.
6. Cross-promotion with other designers and publishers
We say this in its own section because it's the part people ask about.
We may partner with other game designers and publishers to cross-promote each other's games. The way that works is: we feature their game in our newsletter, and they feature ours in theirs. Each of us keeps our own list. Your email address is not given, sold, rented, traded, or otherwise disclosed to a partner.
If we ever want to do something different — a joint mailing where a partner gets your address, a co-hosted giveaway with shared entries, anything where your information leaves us for someone else's marketing — we will:
-
ask you for separate, specific, opt-in permission at that time,
-
tell you exactly who would receive your information and what they'd do with it, and
-
treat your silence as "no."
7. Who we do disclose information to
We use a small number of service providers to run the business. They're contractually limited to using your information only to provide services to us, and they can't use it for their own marketing.
Category
What they do
What they get
Website hosting and site platform
Hosts the Site, provides analytics and forms
Technical data, form submissions
Email marketing platform
Sends and manages our newsletter
Email address, name, engagement data
Payment processor
Processes card payments
Payment and billing details (they hold the card data, not us)
Shipping carriers and fulfillment
Delivers your order
Name, shipping address, contact info
Professional advisers
Accountant, attorney if needed
Only what's necessary
Our current providers are listed at [OPTIONAL: link to a "Service Providers" note, or name them here — e.g. Wix, [email platform], [payment processor]].
We may also disclose information:
-
When the law requires it — in response to a valid subpoena, court order, or lawful government request.
-
To protect people — if we reasonably believe disclosure is necessary to prevent fraud, enforce our Terms, or protect the safety or rights of anyone, including us.
-
In a business transfer — if Boardgamer is acquired, merged, or sells substantially all of its assets, subscriber and customer information may transfer as part of that deal. If that happens, we will require the buyer to honor this policy for information collected before the transfer. If the buyer wants to use your information in a way this policy doesn't allow — including giving your email address to anyone else for their marketing — they have to get your opt-in consent first, the same as we would.
8. Cookies and tracking
The Site uses cookies and similar technologies:
-
Essential cookies keep the Site working — security, load balancing, remembering what's in your cart. These can't be turned off without breaking the Site.
-
Functional cookies remember preferences like language or a dismissed banner.
-
Analytics cookies tell us, in aggregate, which pages people visit and how they found us.
Your choices:
-
Most browsers let you block or delete cookies in their settings. Blocking essential cookies may break parts of the Site.
-
We honor Global Privacy Control (GPC) browser signals as a valid opt-out request for the categories of processing that state law allows you to opt out of. Because we don't run targeted advertising today, there is nothing for that signal to switch off — but the commitment stands in advance of any change, and if we ever do add advertising technology, GPC will be honored from day one.
Do Not Track. Browser "Do Not Track" signals still have no agreed standard, so we don't respond to them separately. We do honor GPC, as described above.
9. Your email choices
-
Unsubscribe any time. Every marketing email has an unsubscribe link at the bottom. It takes effect right away, and always well inside the 10 business days U.S. law allows. Unsubscribe links stay functional for at least 30 days after we send a message.
-
Or just email us at privacy@boardgamer.com and ask to be removed. We'll do it and confirm.
-
Order messages are different. If you've bought something, we'll still email you about that order (confirmation, shipping, a problem) even if you've opted out of marketing. Those aren't marketing messages.
-
We don't add people to the list who didn't ask, and we don't buy email lists.
10. Your privacy rights
Depending on where you live, you may have some or all of the following rights. We honor these requests for everyone who asks, regardless of your state or country — it's easier than sorting people by ZIP code, and it's the right way to run a list.
-
Know / access — what personal information we hold about you, where we got it, why we have it, and who we've disclosed it to. (California law entitles you to the preceding 12 months; if we can easily go back further, we will.)
-
Copy / portability — get a copy in a portable format.
-
Correct — fix inaccurate information.
-
Delete — have your information deleted, subject to exceptions (we may keep what we need for tax records, fraud prevention, or legal compliance). One specific carve-out: if you sent us feedback, a review, or a game idea, we'll delete the personal details attached to it, but the content itself may stay in use under the license you granted in our Terms & Conditions §9.
-
Opt out of sale, sharing, targeted advertising, and profiling — we don't do any of these, so there's nothing to opt out of, but the right stands.
-
Limit use of sensitive personal information — we don't collect any.
-
Non-discrimination — we won't deny you service, charge you differently, or give you a worse experience for exercising a privacy right.
-
Appeal — if we deny your request, you may appeal by replying to our decision. We'll respond to the appeal within 60 days with a written explanation, and if we still deny it we'll tell you how to complain to your state attorney general.
How to exercise a right
Email privacy@boardgamer.com with the subject line "Privacy Request" and tell us what you want. To protect your information, we'll verify your request — usually by confirming you control the email address on file. We may ask for one additional piece of matching information for order-related requests.
Our timelines:
-
We'll confirm we received your request within 10 business days.
-
We'll substantively respond within 45 days. If we need more time, we'll tell you within that window and may take up to 45 additional days.
-
If you ask us to stop selling or sharing your information, we'll act within 15 business days — no extension. (We don't sell or share it, so in practice there's nothing to stop.)
Authorized agents. You may use an authorized agent to submit a request. We'll ask for written proof of authorization and may ask you to verify your identity directly.
Cost. Requests are free. We may charge a reasonable fee or decline a request that's excessive or repetitive, and we'll explain why if we do.
California residents
The rights above satisfy the California Consumer Privacy Act as amended. In the past 12 months we have collected the categories of personal information described in Section 3 — identifiers (including name, email address, postal address, and IP address), commercial information (order history), and internet or other electronic network activity — used them for the purposes in Section 4, and disclosed them for business purposes only to the categories of service providers in Section 7. We have not sold or shared personal information. Under California's "Shine the Light" law, you may also request information about disclosures to third parties for their direct marketing purposes; our answer is that we make none.
EU, UK, and Swiss visitors
We're a U.S. business, and our Site is aimed at a U.S. audience — but people around the world back board games, and you're welcome here.
-
Legal bases are listed in the table in Section 4. Where we rely on consent, you can withdraw it at any time by unsubscribing; that doesn't affect processing that already happened.
-
International transfers. Your information is stored and processed in the United States. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) with our providers.
-
Age of consent. GDPR sets 16 as the default age at which a child can consent to processing, and lets individual countries lower it to as young as 13. We've deliberately set our floor at 16 everywhere, which is the conservative end of that range and valid in every member state.
-
Additional rights include the right to object to processing based on legitimate interests, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority. We'd appreciate the chance to sort it out first — email privacy@boardgamer.com.
-
Automated decision-making. We don't make decisions about you by automated means that have legal or similarly significant effects.
Nevada residents
Nevada law lets residents opt out of the sale of certain covered information. We don't sell it, but you may submit a verified opt-out request to privacy@boardgamer.com.
11. Children
The Site isn't directed to children, and you must be at least 16 to join our email list or send us personal information. Placing an order requires that you be the age of majority where you live, or that a parent or guardian place it for you.
Under 13. The Site is not directed to children under 13 within the meaning of the U.S. Children's Online Privacy Protection Act, and we do not knowingly collect personal information — including cookie or device identifiers — from them. We don't offer accounts, profiles, forums, or anything else built to attract young children, and we don't use the technical data described in Section 3.2 to build profiles of individual visitors.
Under 16. We don't knowingly collect personal information from anyone under 16 either. If we learn we have, we'll delete it.
If you're a parent or guardian who believes your child has given us information, email privacy@boardgamer.com and we'll remove it promptly. We'll confirm which email address is involved so we delete the right record — that's the only step, and we won't ask you to prove anything else.
12. How long we keep information
Information
Retention
Email address and subscriber data
While you're subscribed. After you unsubscribe we delete the subscriber record but keep your email address indefinitely on a suppression list, so a future import can never re-add you. That's the whole purpose it serves, and you can ask us to delete it outright instead
Order records (name, address, items, amounts)
7 years, to satisfy tax and accounting requirements
Support emails
Up to 3 years
Analytics and log data
Typically up to 26 months, often in aggregated form
Privacy request records
As long as required by law to demonstrate compliance
When we no longer need information, we delete it or aggregate it so it no longer identifies you.
13. Security
We use reasonable administrative and technical safeguards to protect your information: reputable hosting and email providers, encryption in transit (HTTPS), access limited to the people who need it, and multi-factor authentication on the accounts that hold your data.
No method of transmission or storage is completely secure, and we can't guarantee absolute security. If a breach affects your personal information, we'll notify you and any required regulators as the law requires.
14. Changes to this policy
We'll post any revised policy on this page with a new "Last updated" date. If the changes are material — a new category of information, a new purpose, a new recipient — we'll notify email subscribers directly before the change takes effect, and where the law requires consent, we'll ask for it.
One change always requires your permission, law or no law: if we ever want to disclose your email address to a partner for their own marketing, we'll ask for your separate opt-in consent first, as described in Section 6. We won't slip that into a policy update.
15. Contact us
Questions, requests, or concerns about privacy:
Boardgamer Games, LLC 4142 Adams Avenue, Suite 103-561 San Diego, CA 92116
We're a small team and we read our email. If something in here isn't clear, ask us and we'll explain it — and if the explanation is better than the policy, we'll fix the policy.
The explanations and information provided herein are only general explanations, information and samples. You should not rely on this article as legal advice or as recommendations regarding what you should actually do. We recommend that you seek legal advice to help you understand and to assist you in the creation of your cookie policy.
