Before you start, we have a few questions for you:
Are you younger than 16? Sorry! You can’t have an account on our websites—click here for more info.
Effective: May 25, 2018
Table of Contents
About mobile apps: We do not provide a mobile app. However, our fans sometimes create unofficial BoardGameGeek mobile apps through which you can access our websites. We are not affiliated with any mobile apps and do not know how they handle your personal information. Please read each mobile app’s privacy policies before using it.
2. What is personal information?
“Personal information” does NOT include information that we have made anonymous so that it can no longer be used to identify you. We collect anonymized data from our users for internal statistical purposes and for providing our services (such as product ratings, top games, and other trends displayed on our websites). We may pass on this anonymous grouped data to third parties, but it will not be associated with your identity.
3. What kind of personal information are you collecting on me?
We only collect as much information about you as is reasonably necessary for us to provide you our services. The table below is a basic summary of what happens to your information. For a more complete list of what we collect, see our USER DATA SUMMARY TABLE.
4. What about the stuff I post publicly or message to other users?
If you register for an account, you will create a public profile. You may include more information on your profile as you desire, such as your full name and location, but remember that it may be accessible to anyone viewing our websites, even if they don’t have an account.
Any content posted on our websites through your account, such as forum posts, wiki pages, product reviews, marketplace listings, comments, collection listings, recorded plays, images, files, or product descriptions, is referred to as your "user contributions". Your user contributions are accessible by anyone who visits our websites. You should not include any sensitive information in your user contributions.
When you send a private message to another user through our websites, including for purposes of trades or Geek Market purchases, we will retain the data and content of the message to provide you with a helpful message thread.
5. I’m a user covered by the EU’s General Data Protection Regulation (“GDPR”).
A. What rights do I have under the GDPR?
B. What is your lawful basis for using my personal information?
There are a couple of reasons we believe we are allowed to collect, use, and store your personal information under the GDPR.
With your consent. When you directly give us personal information for a certain purpose or otherwise express your consent, we can use that personal information for that certain purpose. If you consent for us to do so, we may use your personal information to, for example:
You can withdraw your consent at any time. Please contact us if you would like to revoke your prior consent to any of these uses.
For our legitimate interests. However, we do not always need your express consent to use your information. We can use your personal information as needed for our legitimate interests, so long as those interests do not conflict with your fundamental privacy rights and freedoms. These legitimate interests include:
By contract. A contract also creates a basis for using your information. By accepting our Terms of Service, a contract is formed between us and you so that we may provide you our services. We can use your personal information as needed to provide our services to you under that contract.
Law, protection, or the public good. We can also use your personal information to comply with our legal obligations, protect the vital interests of our users, and as needed for the public good. This may include using your personal information to prevent and handle potential fraud, security breaches or other prohibited activities.
6. How long do you store my information?
If you have an account, we will store your personal information and user contributions indefinitely.
Generally, if you delete your account, we will continue to store your personal information for a short time in case of any issues, and then we will delete it in accordance with our standard procedures and applicable law. However, for security purposes, we continue to store your technical data for up to eighteen (18) months after your account deletion.
Generally, if you delete your account, your user contributions will be removed in the same manner as your personal information. However, you should be careful disclosing information publicly or to other users. Although most types of user contributions will be removed upon your account deletion, any content you contributed to wiki pages, game descriptions, or other editable pages will remain public. Also, other users may still be able to access their copy of any private messages you sent to them while your account was active.
Chatroom logs are not stored. That information is deleted shortly after the chatroom closes.
7. Will you use my personal information to contact me?
As needed, we will contact you by email about your account or use of our services. As permitted by law, we may email you to advertise other products or services available from us, or to request that you complete a survey about your use of our services. You may opt out of these communications by clicking the "unsubscribe" link within an email or by contacting us at firstname.lastname@example.org, or just click here.
We will not pass on your personal information to others that want to market to you without your consent.
8. How are you tracking me? Can I stop it?
A. We can see some of what you do in our websites.
We use tracking technology (like "cookies") to track some of what you do while using our websites. Cookies are files sent to your browser from a website or app and stored on your device. We assign a different cookie to each device that accesses our websites. That way, we can provide you with a personalized experience based on your behavior on our websites. A cookie can, among other things, identify you electronically and store your user preferences.
B. Other people can also track you as your use our websites.
If you have any questions about an ad or other targeted content, you should contact the person who placed the ad.
C. You have choices about how you are tracked.
Opting-out of our targeted ads will not prevent third parties from sending you targeted ads. You can opt out of targeted ads served via specific third party vendors by visiting the Digital Advertising Alliance’s Opt-Out page at http://optout.aboutads.info.
D. We are not set up to respond to "Do Not Track" signals.
9. Who else do you share my personal information with?
If you do business with another user, such as a trade or Geek Market purchase, we will pass on the personal information you provide to the other user, such as your name, address, and phone number, as necessary for them to complete the transaction. They are not allowed to use your personal information for any other purpose. Please contact us if another user is using your personal information inappropriately.
Our "partners" are the organizations and people that we work with to better provide our services. As needed, we may send your information to our partners to help us communicate with you, provide customer support, or process your payments to us. Your information may be stored on our partners’ servers inside or outside of the U.S.
Our BoardGameGeek Store platform
Our BoardGameGeek Store shippers
Our payment processors
Our email processor
Our help desk
Our spam filter
Our backup provider
Our backups are stored encrypted by Arcserve. Only we can decrypt the data.
When we need to for legal or security reasons
We may have to share your information with the police, the government, a court, or another person as required by law. Similarly, as allowed by applicable law, we may share your information with third parties as needed to:
To a new owner of our company
If our business is sold, whether through merger, acquisition, bankruptcy, dissolution, reorganization, or other transaction or proceeding, your personal information may be shared with the acquiring company and their representatives. If so, we will post a notice on this page and the Terms of Service.
With your permission
10. Does my personal information leave my home country?
BoardGameGeek is located in the U.S. If you are outside of the U.S., we will transfer your personal information into the U.S. If you do business with another user, your personal information will be sent to the country in which the other user is located.
11. Can I see what information you have on me?
Yes. You may review your personal information maintained by us. We can provide you with exported files of your information—just ask us.
As required by your applicable state, national, or international law, you may also have the right require us to change or delete your personal information, and/or refuse to permit us from further collecting or using your information.
12. How do I change or delete my information?
You can update some types of information directly within your account settings. If you are unable to change your information within your account settings, please contact us and we will attempt to make the required changes. To protect your privacy and security, we may require you to take certain steps or provide additional information to verify your identity before we provide any information or make corrections. It’s important to remember that if you delete or limit the use of your information, our services may not function properly.
You may delete your account by clicking Delete your account at the bottom of the Account Manager page.
See How long do you store my information? for what happens to your information after your account is deleted.
14. What about information that I receive from other users for trades, Geek Market purchases, and other transactions on your websites?
If you do business with another user, such as a trade or Geek Market purchase, we will pass on to you the personal information they provide, such as their name, address, and phone number, as necessary for you to complete the transaction. Since you are the controller of such data, separately from us, you should inform other users about your privacy practices. In any case, you must abide by privacy laws and respect the privacy rights granted to other users.
15. I'm under the age of 16. Can I use your websites?
No. Our website is not intended for anyone younger than 16 years old. You may not create an account or use any of the features of the websites that an account permits.
We do not knowingly collect personal information from children under 16. If we learn we have received personal information from a child under 16, we will remove it (although we may not be able to fully remove the information from our backup system). If you believe we might have a child’s personal information, please contact us.
16. I am a California resident. Do I have any special rights?
Yes. California Civil Code Section § 1798.83, as it may from time to time be amended or superseded, permits California residents to request certain information regarding our disclosure of their information to third parties for their direct marketing purposes. To make such a request, please contact us.
17. I am a Canadian resident. Do I have any special rights?
Yes. Canadian residents have certain rights under Canadian law with respect to their personal data, including the right to request access to, correct, amend, delete, or limit the use of their personal data. Canadian residents also have the right to withdraw their consent to certain of our online tracking programs.
In accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we are responsible for the information of Canadian residents if we transfer it to a third party. Before we send a Canadian resident's information to a third party, that party must agree to handle the information only as we direct them to and to protect the information as least as well as we do.
18. Who can I contact with questions?
Data Protection Officer:
If you are located within the European Economic Area, you may also contact a supervisory authority in your home country to report violations of the GDPR.