BoardHopper
Legal

Privacy Policy

Last updated: March 22, 2026

Your privacy matters to us. This policy explains exactly what data BoardHopper collects, how we use it, who we share it with, and what rights you have — in plain English.

1. Who We Are

BoardHopper is a board gaming platform connecting players with board game cafes and venues across India. We operate at boardhopper.in and provide services to both individual players (B2C) and venue operators (B2B).

For privacy questions, contact us at contact@boardhopper.in with the subject line "Privacy Inquiry".

2. Information We Collect

2.1 Information You Give Us

  • Account details — email address, phone number, display name
  • Profile information — optional fields like birth year and address
  • Venue operator details — organisation name, location information (B2B users)

2.2 Information Generated by Your Use

  • Games you browse, borrow, or play
  • Events and meetups you view, register for, or attend
  • Check-in timestamps at venues
  • Play session records and scores
  • Wishlist items and game ratings
  • Friend connections and social activity

2.3 Technical Information

  • IP address and approximate location (city level)
  • Browser type, device type, and operating system
  • Pages visited, time on page, and click patterns
  • Session identifiers and authentication tokens

2.4 Third-Party Analytics

We use Google Analytics and Microsoft Clarity to understand how visitors interact with BoardHopper. These services collect anonymised usage data. Neither service gives us access to information that personally identifies you without your explicit consent.

3. How We Use Your Information

We use your information only to operate and improve BoardHopper. We do not sell your personal data to third parties.

To provide the Service

  • Authenticate you and maintain your session
  • Record lending transactions and play history
  • Enable event registration and check-in
  • Display your activity and stats on your profile
  • Let venues recognise returning customers

To improve the platform

  • Analyse usage patterns to prioritise features
  • Detect and fix bugs and performance issues
  • Build aggregate reports (no individual data exposed)

4. How We Share Your Information

With Venues You Visit

When you check in to a venue or borrow a game, that venue's staff can see your name, phone number, and your borrowing or event history at their location. They cannot see your activity at other venues unless you have set your profile to "Public".

With Infrastructure Providers

Our backend runs on Supabase (database and authentication, hosted in AWS EU region). Data is encrypted in transit (TLS) and at rest.

For Legal Reasons

We may disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.

5. Your Privacy Controls

Within your BoardHopper profile you can choose one of three privacy levels:

Private

  • →Only you see your full profile and history
  • →Venues see only what is needed to process a transaction
  • →Your profile is not searchable by other players

Organisation (Default)

  • →Venues you visit can see your profile and in-venue history
  • →Limited cross-venue statistics visible to venues
  • →Profile not visible to other players
  • →Best balance of privacy and personalised service

Public

  • →Your profile and gaming stats are searchable by other players
  • →Tournament results and event attendance are public
  • →Good for competitive players and community builders

You can change your privacy level at any time in your profile settings.

6. Cookies and Tracking

BoardHopper uses the following types of cookies and storage:

  • Essential — authentication tokens and session state required for the app to function
  • Analytics — Google Analytics and Microsoft Clarity for aggregate usage insights
  • Preferences — local storage values that remember your filter and UI settings

7. Data Retention

  • Active accounts — retained for as long as the account is open
  • Deleted player accounts — personal data removed within 30 days of deletion request
  • Cancelled venue accounts — data retained for 90 days, then deleted
  • Transaction records — borrowing and play records retained indefinitely for audit purposes
  • OTP codes — deleted within 1 hour of generation

8. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — update or correct inaccurate information directly in the app
  • Deletion — request deletion of your account and personal data
  • Portability — receive your data in a machine-readable format
  • Objection — object to certain types of processing

To exercise any of these rights, email contact@boardhopper.in with the subject line "Privacy Request". We will respond within 30 days.

9. Children's Privacy

BoardHopper is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account.

10. Security

We protect your information using:

  • HTTPS/TLS encryption for all data in transit
  • Encryption at rest for all database records
  • OTP-based, passwordless authentication (no passwords to steal)
  • Row-level security rules ensuring users can only access their own data
  • Regular security reviews

11. Changes to This Policy

We may update this policy from time to time. When we make material changes we will update the "Last updated" date at the top and, where appropriate, notify you by email.

12. Contact

For any privacy-related questions or requests:

BoardHopper

contact@boardhopper.in

Subject: Privacy Inquiry

BoardHopper Privacy Policy • Effective March 22, 2026