Privacy Policy

1. Who runs Cardboard Trove

Michael Longerich, Thailand.

Contact: hello@cardboardtrove.com

2. What we hold

You can use Cardboard Trove without giving an email address. Tapping Get started creates an anonymous account.

Data we hold for your account:

• Your email address and login details, only if you add a backup. Passwords are handled by our login provider and we cannot read them.
• Your BoardGameGeek username, only if you import a collection.
• A display name, if your account has one.
• Your games, copies, notes and tags.
• Your lending and borrowing records, including dates.
• The people you add as friends. See section 3.
• Records of your BoardGameGeek imports, including items that failed.
• The date you last used the app.

We collect this from what you enter and from using the app, and from BoardGameGeek when you import. The services in section 4 may also process your IP address to deliver the app. We do not use it to identify you.

We do not use ads, analytics or tracking, and we do not sell your data. We send email only for login, account backup and account deletion warnings. This website sets no cookies and has no trackers.

3. Information about other people

You can add friends by typing a name and choosing an avatar colour, and record loans against them. Those people have no account and are not contacted by the app. Only you can see what you enter about them.

Please add only what you need to keep track of your games. If you think you are named in someone's account, email us and we will help where we can.

4. Who else handles data

Supabase

Login and database

DigitalOcean

Server that runs the app's backend

Resend

Sending login and account emails

BoardGameGeek

Game information, and your collection when you import by username

Expo

Delivering app updates

We share data with these services only to run the app. Supabase, DigitalOcean and Resend handle data for us under data protection terms that require them to keep it confidential and secure, to the same or an equal standard as this policy. Expo receives only app update requests, not your account data, under its own terms. BoardGameGeek receives only the username you enter to import, under its own terms.

Your data is stored in Singapore. Some services may process data in other countries, including the United States.

5. Why we use your data

• To provide the app and your account, which is needed to do what you asked us to do.
• To keep the service secure and working, and to remove unused accounts, which are our legitimate interests.
• To send a backup or sign-in email when you ask for one.

An email address is optional. Without one, you cannot recover your account on a new device. We make no automated decisions about you.

6. How long we keep it

We keep your data until you delete your account, or until it is removed as inactive.

Inactive accounts can be deleted:

• An anonymous account holding nothing, from 30 days after it was created.
• Any other account, after 24 months without use. Opening the app while signed in counts as use.

If your account has an email, we warn you 30 days and 7 days before deletion. Anonymous accounts get no warning, because we have no way to reach you. Deleted accounts cannot be recovered. You can always start again.

7. Deleting your account

Go to Settings and choose Delete Account. This permanently deletes your account, your records and your login, and nothing is retained. Shared catalogue information about games, such as BoardGameGeek data, is not personal data and stays. Other people's records stay theirs. If someone else added you as a friend, deleting your account does not change their list.

You can also email us to ask for deletion.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, object to or move your data, and to withdraw consent. You can do most of this in the app. For anything else, email hello@cardboardtrove.com.

You may also complain to your data protection authority. In Thailand, that is the Personal Data Protection Committee.

9. Children

Cardboard Trove is not directed at children. If you believe a child has given us personal data, email us and we will delete it.

10. Changes

If this policy changes, we will update the date above. If a change is significant, we will say so in the app.