Privacy Policy

Last updated: April 2026

1. What Data Is Used

Bored Games uses the minimum data necessary to operate the service:

• Account identifiers — your Discord ID and username, and any other platforms you choose to link.
• Game data — game logs, scores, win/loss records, play duration, and player counts that you create.
• Collection data — games imported from your BoardGameGeek account.
• Community data — group memberships, chat messages, and LFG posts you create within communities.
• Location data — used only for Local Communities distance calculations. This data stays on your device and is never stored on our servers.

2. Email Address

Your email is used only for authentication and is never stored in our application database. If your account is banned, a hash of your email is retained to prevent re-registration.

3. What We Don't Collect

• We do not collect analytics or tracking data.
• We do not use advertising SDKs or ad networks.
• We do not sell, share, or provide your data to any third party.
• We do not store your GPS location or email address on our servers.

4. How We Use Your Data

Your data is used exclusively to provide the Bored Games service — game tracking, matchmaking, community features, leaderboards, and achievements. Nothing more.

5. Discord Integration

When you connect your Discord account, we access your Discord profile (username, avatar, server memberships) to enable matchmaking and community features. The Bored Games bot operates in servers where it has been invited by server administrators. We do not read or store your Discord messages.

6. BoardGameGeek Integration

When you import your BGG collection, we fetch your public collection data from the BGG API and store game names and IDs in your account. We do not access your BGG password or private data.

7. Data Storage

Your data is stored securely on Supabase (PostgreSQL) with row-level security policies ensuring users can only access their own data. All connections use TLS encryption.

8. Data Retention

Your data is retained for as long as your account exists. You may delete all your data at any time through the Privacy section in the app settings.

9. Karma Reset Prevention

Karma is a community-trust score. To stop people gaming the system by deleting their account and re-creating it whenever their karma drops, we retain a small fingerprint when an account is deleted with a karma score below 50.

That fingerprint is:

• A SHA-256 hash of your Discord ID, salted with a server-side secret we never expose to the public or store in the same database row. The hash is one-way — it cannot be reversed back into your Discord ID. Without our server-side secret, even someone with full database access cannot tell which hash corresponds to which Discord account.
• The karma score at the moment of deletion.

We do not retain your name, avatar, email, or any other identifying details once you delete. The fingerprint above is the entire record.

The fingerprint is not stored indefinitely. The next time you sign in via Discord with the same account, we re-compute the hash, find the match, restore your karma score, and delete the fingerprint in the same step. From that point on, no trace of your deletion remains. If you never sign back in, the fingerprint stays — but it is meaningless on its own.

This is processed under the legal basis of Legitimate Interest in maintaining a fair trust system for the community.

10. Ban Enforcement & Data Retention

If you are banned for a violation of our Terms of Service, we may retain the following to prevent future attempts to access the platform:

• A hashed (irreversible) version of your email address — this cannot be used to identify you or recover your email, but allows us to recognise repeat registrations.
• Your linked platform identifiers (e.g. Discord ID) — to prevent re-registration via the same third-party account.

This data is processed under the legal basis of Legitimate Interest in maintaining the security, safety, and integrity of the platform for all users. This retained data is used solely for ban enforcement and is not shared with third parties.

If you believe your ban was issued in error, you may appeal by contacting us via the Help & Support page.

11. Your Rights

You have the right to:

• Download a complete copy of your data as a JSON file (available in Privacy settings).
• Delete all your data permanently (available in Privacy settings).
• Control your visibility using privacy toggles for game history, collection, karma, profile, online status, friend requests, local communities, and leaderboards.

12. Children

Bored Games is not intended for users under 16 years of age. By using the app, you confirm that you meet this age requirement.

13. Changes to This Policy

We may update this privacy policy from time to time. Changes will be communicated through the app and on this page.

14. Contact

For questions or concerns about your privacy, reach out via our Discord server or the in-app Report feature.