Your papers, and what we keep

WHO WE ARE

boardgame.plus is the board game studio of Remix Labs LLC, a Nevada limited liability company. Questions, or to ask what we hold about you: support@boardgame.plus. Playing here also means our Terms.

WHAT WE KEEP

• Your email address, to send you sign-in codes and receipts.
• If you sign in with Google: your Google account number, so Google always opens the same account. We never see your Google password, and we don't ask Google for your name or photo.
• Your codename, which other players see.
• The games you own, how you got each one (bought, box code or subscription), and whether your subscription is active.
• Which version of our Terms you agreed to, and when.
• Reports you send us or that name your account, and what we decided, so we can keep players safe.
• Whether you switched on Dispatches (studio news), when, in which game, and which version of this notice you saw.
• Scrambled records of your sign-ins, of how many codes were asked for, and of how many came from your network (a scrambled key, never your address, kept for a day), to stop abuse.

MEDALS

When you're signed in, the medals you earn, when you earned them, and your running totals for each game (games played, wins, win streaks) are kept with your account so they follow you to any device. Signed out, they stay on that device only. They are deleted with your account. The medal page shows what share of players hold each medal; that number never names anyone.

WHAT GAMES SEE

Your codename and an account number. Never your email. A name you type in a game (in party mode or an online room) is shown to the other players in that game. In Berlin, lines on The Wall (its table talk) go to the other player and are not stored by us. Our other games have no chat, and Berlin's voice "Radio" is switched off.

WHAT WE NEVER DO

We don't sell or rent your email, show you ads, or track you across other sites. Because we don't track you, there is nothing for your browser's Do Not Track setting to switch off.

COOKIES AND STORAGE

We set two cookies, only on accounts.boardgame.plus, and only to sign you in:

• __Host-bgp keeps you signed in on the web, for up to 180 days. Signing out removes it.
• __Host-bgp-oauth remembers a "Continue with Google" sign-in while it happens, for 10 minutes.

When you open a checkout, Paddle's checkout sets one cookie of its own (__cf_bm, bot protection, about 30 minutes). No game sets a cookie, and we use no tracking or advertising cookies, so there is nothing to accept.

Your browser also keeps a few things on your device so the site and games work: your codename and the sign-in step you are on (boardgame.plus), and each game's settings, saved games and your seat in online games. Queen of the Hill, Berlin and CRUZ also keep a record of the games you finish, on your device only; it never leaves your browser, and we are switching it off. To remove any of it, clear this site's data in your browser.

THE BOT CHECK

When you sign in with email on boardgame.plus, Cloudflare Turnstile checks that you're a person, with no puzzle to solve. It reads signals from your browser and device, plus your network address, and tells us only whether the check passed. We never send it your email. Cloudflare handles these signals under its Turnstile Privacy Addendum. If the check can't run (an ad blocker, say), you can still get a code.

EMAILS WE SEND

Sign-in codes when you ask for one. Dispatches only if you switch them on, and every one tells you how to stop. Receipts for anything you buy come from Paddle.

WHO RUNS THE PARTS

Like any website, each of these sees your internet address when you visit or play:

• Our pages and game sites are hosted by Vercel.
• Our sign-in service, its database, the bot check and some game servers (King Fu, Dogfight) run on Cloudflare.
• The online games of Berlin, Queen of the Hill, CRUZ and Golden Arrow run on Fly.io.
• Berlin and Dogfight load their fonts from Google Fonts (we are moving them onto our own servers), and Dogfight loads code from jsDelivr and cdnjs.
• Sign in with Google is run by Google.

Our emails are sent by Resend, which receives your email address, not your internet address. Payments are handled by Paddle, the reseller you buy from: Paddle takes your card, and we never see it. We give Paddle your email for your receipts, and Paddle tells us what you bought. Paddle's checkout window also uses Paddle's own analytics and error reporting, under Paddle's privacy notice.

HOW LONG WE KEEP IT

• Your account, and everything listed above, until you delete it. If no one signs in for 3 years, we may delete it after emailing you 30 days ahead (never while it has an active pass or games it bought or unlocked).
• Sign-in codes: 10 minutes. A saved sign-in: up to 180 days, or until you sign out. Counts used to stop abuse: a day or two, network keys a day.
• Reports and what we decided: up to 2 years after we act on them, or longer if the law requires.

DELETING YOUR ACCOUNT

On your account page, choose "Delete account". Any subscription is cancelled first, then your email, codename, Google link, games, agreements and sign-ins are removed at once. Paddle keeps its record of what you bought, as a seller must for tax law. Cloudflare keeps a safety copy of our database for 7 days, and Resend keeps its record of the emails it sent (the address and subject line) for its own retention period. Both clear on their own.

YOUR CHOICES

Wherever you live, you can ask what we hold about you, ask us to correct it, or delete your account: write to support@boardgame.plus, which is also our designated address for any request under Nevada law. We do not sell personal information. If you're under 18, you can change your codename at any time on your account page, or delete your account; a name may still appear in places we don't control, such as someone else's video.

If you live in the EU or the UK: we use your information to run the account you asked for, to keep the Service safe and working (our legitimate interests), and for Dispatches only with your consent, which you can withdraw at any time. You can also ask for a copy of your data, object to how we use it, and complain to your data protection regulator. Our service providers are in the United States, so your information is processed there.

AGE

boardgame.plus accounts are for players 13 and older. Every game plays without an account. If we learn that an account belongs to a child under 13, we delete it and its information. If you're under 18, read this with a parent or guardian. A parent or guardian can ask what we hold about their teen, or ask us to delete the account, at support@boardgame.plus.

CHANGES

Each version takes effect on the date above. If this notice changes, the version changes, every older version stays readable at its own address, and we tell you about material changes by email or when you next sign in. We ask again before sending Dispatches only when a change affects Dispatches.