Board Game Almanac does not sell personal data, use it for cross-app advertising profiles, or include advertising or session-replay software. The website uses PostHog product analytics as described below.
Who operates the service
Board Game Almanac is operated by Amafi (HK) Limited in Hong Kong. This policy covers the Board Game Almanac iOS app and website.
What we collect
You can browse the current catalog without an account. If you register with email and password, we receive your email address and chosen display name and require you to verify the address before signing in. If you choose Apple or Google, we receive an account identifier and, when the provider makes them available, your email address and display name. Passwords are handled by Supabase Auth and are not available to Board Game Almanac staff.
When you use collection features, we store the games you mark as owned, played, or wanted; your personal ratings and collection order; play counts; and last-played dates. Collections are private by default. If you make yours public, people can find your display name and public handle and see the published games you mark as owned; wanted games, ratings, play history, dates, and account identifiers are not included in the public collection response. When you use Rodney, we store your rules questions and Rodney’s answers in a private conversation for that board game so you can reopen it and ask follow-up questions. If you report an answer, we store the reason you chose, any note you write, and a copy of that question and answer, so an editor can check it against the rulebook. Authentication sessions are stored on your device or browser. Our hosting providers may process routine security and request logs, such as IP address, browser or device information, request time, and error details.
If you use the contact form, we receive the name, email address, category, and message you provide. The form service also processes limited request information, including an IP address, to control abuse and deliver the message.
On the production website, PostHog records page paths and named collection and Rodney milestones, a pseudonymous visitor identifier, referring page path, browser and device information, and approximate location derived from network information. If you are signed in, we associate these events with your internal account identifier. We do not send PostHog URL query parameters, clicked text, your email address, display name, collection contents, rules questions or answers, review text, or search text. Automatic click capture and session replay are disabled.
How we use data
- To authenticate your account and sync your collection across devices.
- To provide collection, rating, play-history, and recommendation features.
- To show and search a collection when its owner has chosen to make it public.
- To answer board-game rules questions and preserve your per-game Rodney history.
- To review reported answers and correct the rulebook index.
- To receive, route, and respond to messages you send us.
- To understand site traffic, feature use, and where the website needs improvement.
- To secure, troubleshoot, and operate the service.
- To comply with law and respond to valid rights or safety requests.
Sponsored placements are kept separate from organic ranking signals. We do not use your account data for cross-service advertising profiles.
Service providers and transfers
Supabase provides authentication, database, storage, and server functions; the live project is hosted in Singapore. Vercel serves the website. Resend delivers contact and authentication email, and Google Workspace receives contact messages for our team. OpenRouter routes Rodney’s rules questions and recent conversation context to the configured answer model; the current integration requests zero-data-retention processing. PostHog provides website analytics through its United States service. Apple and Google process information when you use their sign-in services. These providers process data under their own terms and may handle it outside your country.
Retention and deletion
We retain account, collection, and saved Rodney conversation data while your account is active and as needed for security, legal compliance, or dispute resolution. Contact correspondence is retained for as long as needed to answer it and handle any related operational, rights, safety, or legal issue. Analytics data is retained according to the settings of our PostHog project and deleted or aggregated when it is no longer needed. You can permanently delete your account, synced collection, Rodney history, and any answer reports you filed from the profile controls in the iOS app or website. You may also contact us for help. Routine infrastructure backups may retain a protected copy for a limited recovery period before it is overwritten.
Your choices
You may use catalog and public-collection discovery without signing in, switch your own collection between public and private at any time, enable your browser's Do Not Track preference to disable PostHog collection on this site, disconnect Apple or Google through that provider, or request access, correction, or deletion where applicable. Some rights depend on where you live.
Children
The account service is not intended for children below the minimum age required to manage their own online account in their country. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and delete it.
Changes and contact
We will update the date above when this policy materially changes. Questions and privacy requests can be sent to support@boardgamealmanac.com.