Privacy Policy
Last updated: March 2026
What data we collect
When you create an account, we collect:
- Account info — your username and email address (via Authentik, our identity provider).
- Game preferences — boardgames you rate, add to your collection, or mark as loved.
- Platform connections — if you connect a third-party platform (Board Game Arena, Yucata, Tabletopia, etc.), we store your username on that platform to fetch your game history.
- Profile info — optional fields like city/timezone you fill in yourself.
We do not collect payment information — BoardGameMatcher is free.
How we use it
- Power the matching and recommendation features.
- Display your public profile and game collection to other users (if you choose to make it public).
- Send transactional emails (password reset, account verification) — no marketing emails.
- Improve the site based on aggregate, anonymous usage patterns.
We do not sell your data or use it for advertising.
Third-party services
- Authentik — identity and authentication provider. Handles login, password storage, and sessions.
- ImageKit CDN — serves optimised images (game covers, etc.). No personal data is sent to ImageKit.
- BoardGameGeek — game data (titles, mechanics, ratings) is sourced from BGG's public dataset. No personal data is shared.
- Microsoft Clarity — anonymous session recordings and heatmaps to understand UI issues. No personally identifiable information is captured.
- Hetzner — our hosting provider. Servers are located in Europe (Germany).
Cookies
We use a single session cookie to keep you logged in. No tracking cookies, no advertising cookies.
Microsoft Clarity may set additional cookies for its analytics. These are anonymous and contain no personal data.
Data retention and deletion
Your data is kept for as long as your account is active. You can request deletion at any time by contacting us (see below). We will delete your account and all associated personal data within 30 days.
Anonymised aggregate statistics (e.g., total number of ratings) may be retained after deletion.
Your rights
Under GDPR you have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at the address below.
Contact
Questions about this policy? .