Privacy Policy

Introduction

Board Game Events ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

IP Address Collection and Retention

What We Collect

We collect your IP address when you:

Create an account
Log in to your account
RSVP to events
Create or edit venues, events, or groups
Access admin features (if applicable)

Why We Collect It

Prevent spam and abuse
Detect unauthorized access attempts
Enforce rate limits on API usage
Comply with legal obligations

How Long We Keep It

First 30 days: Full IP address retained for fraud detection
Days 31-90: IP address anonymized (last digits removed)
After 90 days: All audit records including anonymized IPs are deleted

Legal Basis

We process IP addresses under legitimate interest (GDPR Article 6(1)(f)). We have a legitimate interest in preventing abuse and protecting our users. Your privacy is balanced against this interest through automated anonymization and deletion.

Your Rights

You have the right to:

Request a copy of your audit trail (while it exists)
Object to processing (though this may limit your ability to use the service)
Request deletion of your account and associated data

🤖 Automated Enforcement

Our system automatically:

Anonymizes IP addresses older than 30 days (weekly)
Deletes audit events older than 90 days (weekly)

This ensures compliance without manual intervention.

Information We Collect

Account Information

Email address (required for login)
Display name
Profile information you choose to provide

Usage Information

Events you create or RSVP to
Groups you join or create
Venues you create or manage

Location Information

Addresses you provide for venues or groups
Location preferences you set for discovery
Geocoded coordinates (derived from addresses)

How We Use Your Information

Provide and improve our services
Connect you with other board game enthusiasts
Send you notifications about events you've joined
Prevent fraud and abuse
Comply with legal obligations

Data Sharing

We do not sell your personal information. We may share your information:

With event organizers (when you RSVP to their events)
With group members (when you join a group)
When required by law
With service providers who help us operate the platform (under strict confidentiality agreements)

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption, secure authentication, and automated data retention policies.

Your Rights

Under GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate personal data
Erasure: Request deletion of your personal data
Restriction: Restrict processing of your personal data
Portability: Receive your data in a machine-readable format
Object: Object to processing based on legitimate interests
Withdraw consent: Where processing is based on consent

Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us:

Email: privacy@boardgameevents.com

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page.