Privacy policy

Data controller

The data controller is the publisher of the service (see Legal notice). For any question about your data, use the form on the Contact page.

Data collected

Account and sign-in: displayed first name, email address and sessions, managed via Better Auth.

Created content: game nights (name, date, place, optional address), collections and imported games.

Guests: first name, attendance status and game profile, entered by the guest or the host.

Waitlist: if you leave your email in the “the brigade is coming” box, we keep it (along with the tier you're interested in, if any) to notify you when the plans launch.

Technical data: usage and security logs strictly necessary for operation.

Purposes and legal bases

Provide and operate the service, manage accounts and game nights (performance of the service).

Notify you when the plans launch if you joined the waitlist (consent, withdrawable at any time).

Ensure security and prevent fraud (legitimate interest).

Send sign-in and invitation emails (performance of the service / consent).

Sub-processors and recipients

Cloudflare, Inc.: hosting, database (D1) and storage (R2).

Resend (Resend, Inc.): sending transactional emails (sign-in codes, magic links).

BoardGameGeek and MyLudo: queried only at your request when importing a collection.

Transfers outside the European Union

Some providers (Cloudflare, Resend) rely on infrastructure located in the United States. Any transfers are covered by appropriate safeguards (European Commission standard contractual clauses and/or the Data Privacy Framework).

Retention period

Data is kept for as long as necessary for the purposes described, then deleted or anonymized. Deleting your account erases your game nights, guests and collections. Waitlist emails are kept until the plans launch or until you unsubscribe.

Your rights

Under the GDPR, you have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to set post-mortem directives.

You can exercise these rights via the form on the Contact page, and lodge a complaint with the CNIL (cnil.fr).

Cookies

The service uses only cookies strictly necessary for its operation (authentication session). No advertising cookie is set. Any future analytics would be subject to your prior consent.

Minors

The service is not intended for people below the digital age of consent applicable in their country (15 in France). Accounts are reserved for adults or those with the required authorization.