BoardgameMarketplace Privacy Policy

1. Information We Collect

• From your Facebook login: your name, email address, Facebook account ID, and profile picture. We keep our own copy of the picture, update it each time you sign in with Facebook, and remove it if you no longer have one there. We never see your Facebook password, and we don't get your location from Facebook.
• Your location: the position your browser shares when you allow it, rounded to about 1 km before we store it or look up the place name, so your exact position is never kept, with the town or city and country found there. We use it to show distances and nearby listings, to place your listings, for wishlist alerts, and to choose miles or kilometres and the rules for your country (such as payment methods and any yearly sales limit). If you don't allow it, we use an approximate location estimated from the IP address of your connection. A signed-in member's location is saved to their account until they update it in their profile settings; one chosen "just for this visit" is kept only for that visit and doesn't change the saved one. For visitors who are not signed in, the location is kept only for the visit.
• What you post and do: your listings and photos, messages with other users, reviews, wishlists, saved listings, reports, support requests, and settings such as language, currency, accepted payment methods, and notification preferences.
• Technical data: the time of your current and previous sign-in and the number of sign-ins (we do not store sign-in IP addresses), and standard server logs (IP address, browser type, and pages requested).
• If you turn on notifications for a device: that device's address at its browser's push service, the keys that encrypt notifications for it, its browser and system name (such as "Chrome on Android"), and when it was added and last used. Removing the device, turning notifications off on it, logging out on it, or deleting your account removes this.

2. Why We Use It, and Our Legal Basis

• To run your account and the marketplace (show your profile and listings, deliver messages, calculate distances, send wishlist matches and account notices). Basis: our contract with you.
• To keep the site safe (prevent fraud and abuse, review reports, enforce our Terms, fix problems). Basis: our legitimate interest in a safe, working site.
• To use your browser's precise location, and to show advertising that uses cookies. Basis: your consent, which you can withdraw at any time.
• To meet legal obligations, such as answering lawful requests from authorities.

We do not sell your personal data.

3. Who Can See or Receive Your Data

• Everyone: your name, profile picture, listings, reviews, and ratings are public. Your town or city, map coordinates, and email address are never shown to other people: they see only roughly how far away your listings are, and never closer than 3 miles (5 km).
• Users you talk to: the people you message see what you write. Any contact or delivery details you choose to share in messages are shared with them. They may use those details only to complete the deal with you (see the Terms).
• Service providers that help us run the site:
  • Facebook (Meta Platforms), for signing in. When you sign in, we fetch your profile picture from Facebook once; people viewing your profile see our copy, so their browsers don't contact Facebook.
  • OpenStreetMap's Nominatim service, which turns coordinates into place names and back.
  • ipinfo.io, which estimates an approximate location from your connection's IP address when you're not signed in or don't allow your browser to share your position.
  • Google AdSense, which shows ads and may use cookies (see the Cookie Policy).
  • Your browser's push service (Google, Apple, Mozilla, or Microsoft, depending on your browser), if you turn on notifications for a device. It delivers them to that device, encrypted so the service cannot read them.
  • Cloudflare, which runs our domain names, delivers the site to your browser and protects it from attacks (so it handles every visit, including your IP address), and forwards email sent to our support address.
  • Postmark (ActiveCampaign), for sending emails such as account notices and wishlist summaries.
  • DigitalOcean, which hosts the site and its database in New York City, USA, and stores encrypted nightly backups in [TO FILL: backup region and country].
• Authorities or others, when the law requires it, or when needed to prevent fraud or protect someone's safety.
• A new owner: if the site or BoardgameMarketplace LLC is sold or merged, your data would pass to the new owner, who would have to follow this policy. We will tell you before that happens.

4. International Transfers

Some of these providers are in other countries, including the United States. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses. [TO FILL: confirm once the hosting and email providers are chosen.]

5. How Long We Keep Data, and Deleting Your Account

We keep your data while your account exists. You can delete your account at any time from your profile settings. When you do, we remove your name, email address, location and coordinates, profile picture and Facebook link, your wishlists and saved listings, and your listings that have not been sold, with their photos. If other users wrote to you about one of those listings, it stays, hidden, as part of their chats, with only the game, condition, and price. Messages you sent, reviews, and completed listings stay on the site, shown as "Deleted User", because other users rely on them. Backups are encrypted and kept for up to 30 days, then deleted. If we ever restore one, we delete again any account that was deleted after it was made. Server logs are kept for [TO FILL: once log retention is set], then deleted.

Coming back after deleting your account: we normally keep nothing that links a deleted account to your Facebook account. We keep a coded fingerprint of your Facebook account ID (a one-way code made with a secret key, not the ID itself) only when it's needed: if your account was suspended (so a suspension can't be avoided by deleting and signing up again; kept indefinitely), if another member blocked you (so the block still protects them; kept while the block exists), or if other members reviewed you (kept for one year). In that last case you choose when deleting: keep your reputation, so that signing in again with the same Facebook account within the year restores your account, or delete permanently, so that the same Facebook account can't sign up again for a year. After the year, the fingerprint is deleted unless one of the other reasons still applies.

Photos and reported listings: when you remove a photo from a listing or change its description, we keep the earlier version for 90 days, or until any report about that listing has been reviewed if that takes longer, so our moderators can check what a reported listing showed; then it is deleted. If you delete your account while one of your listings has a report waiting for review, that listing, its photos, and the report are kept, hidden from other users, until the review ends or for at most 90 days, then deleted.

6. Security

We use encrypted connections (HTTPS) and limit who can access personal data. No system is perfectly secure, and we will tell you and the authorities about a data breach where the law requires it.

7. Your Rights

Depending on where you live, you can ask to see, correct, download, restrict, or delete your personal data, object to how we use it, and withdraw consent at any time (for example by turning off location in your browser or choosing "Essential only" in the cookie banner). You can edit most details yourself in your profile settings; for anything else, contact us. To protect your account, we may need to confirm a request comes from you before acting on it. You also have the right to complain to your local data-protection authority.

California residents: we do not sell personal information. Advertising cookies may count as "sharing" under California law; you can opt out by choosing "Essential only" in the cookie banner, or by turning on Global Privacy Control in your browser, which we treat as "Essential only". We don't respond to "Do Not Track" signals, because there is no agreed standard for them.

8. Children

BoardgameMarketplace is not meant for anyone under 18 years of age. If you believe a child has given us personal data, contact us and we will delete it.

9. Cookies

We use cookies and similar browser storage as described in our Cookie Policy.

10. Changes to This Policy

We will update the date at the top when this policy changes, and tell you in advance about important changes, by email or with a notice on the site.