Privacy Policy
Effective August 2025. Last updated August 2025.
This Privacy Policy explains how TheBoard.GG (theboard.gg) collects, uses, and shares information when you visit the site, view the leaderboard, or place a bid. It sits alongside our Terms of Service.
Who is responsible
The controller for personal data processed through the Service is Tomasz Szymeczek, an individual based in Poland.
What we collect
We collect only what we need to run the board, process bids, prevent abuse, and understand traffic.
Bid data
When you place a bid we collect your display name, email address, bid amount, and optional message. Your display name is shown publicly on the leaderboard. Your email is never shown publicly and is used only to confirm payment or contact you in case of an issue.
Payment data
Card details and billing identity are collected by our payment provider (Stripe or Polar), not by us. We receive only a payment confirmation reference. See Stripe's and Polar's own privacy notices.
Fraud-prevention data
We store a one-way hash of your IP address alongside your bid for fraud detection and rate-limiting. The hash cannot be reversed to your IP address.
Analytics
We use Google Analytics to understand traffic patterns. Google may set cookies and collect your approximate location and device information. See Google's privacy policy.
Messages you send us
If you contact us (e.g. via X), we keep that correspondence as needed to respond and to keep a record.
Cookies
We use a session cookie for admin authentication. Your theme preference (light/dark) is stored in localStorage. Google Analytics sets its own cookies for analytics purposes. We do not use advertising or tracking cookies beyond Google Analytics.
Why we use this data
- Contract. To process your bid, update the leaderboard, and provide the Service you asked for.
- Legitimate interests. To keep the board fair (rate limiting, bot filtering), measure visits, debug outages, and defend legal claims. You may object to processing based on legitimate interests as described below.
- Legal obligation. To keep accounting and legal records where the law requires it.
Public leaderboard data
Display names, bid amounts, messages, and creator rankings are public. Anyone can see them, including search engines. Do not place a bid with a display name or message you do not want shown publicly.
Who we share data with
- Stripe / Polar — checkout and payment confirmation
- Google Analytics — anonymised visit counts and traffic analysis
- Hosting infrastructure — server and database providers needed to run the site
- Authorities or legal successors — if we must share data to comply with law, enforce the Terms, or transfer the project
We do not sell your personal data. Some processors may be outside the European Economic Area; where we rely on them, we use appropriate safeguards.
How long we keep it
- Public bid records (display name, amount, message) are kept as long as the leaderboard runs.
- Your email address is kept for up to 2 years after your last bid, then deleted.
- IP hashes are kept only as long as useful for fraud prevention, then deleted.
- Payment references are kept as long as needed for accounting and dispute handling.
Your rights
If the GDPR or a similar law applies to you, you may ask us to access, correct, delete, or export personal data we hold about you; to restrict or object to certain processing; and to withdraw consent where processing was based on consent. You may also lodge a complaint with a supervisory authority, including the Polish DPA (UODO) or the authority in your country of residence.
Contact us on X. We may need enough information to identify your data. Public leaderboard entries can be anonymised on request; the bid amount forms part of the permanent ranking record and cannot be removed from historical totals.
Children
The Service is for adults (18+). We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete the data we can identify.
Changes
We may update this policy when the Service or the law changes. The date at the top of this page is the current version. Continued use after a change means you accept the updated policy.