Privacy Policy

Last updated 5 August 2026

Board Game Caddy is a small, independent project. This page explains in plain language what it stores, why, and what it will never do with it.

The short version. We never ask for your email address. We never sell or share your data. There are no ads and no advertising trackers anywhere. The app itself runs no analytics at all. Your BoardGameGeek password is never stored. You can export everything, and you can ask us to delete it.

Who we are

Board Game Caddy ("the app") is operated by an independent developer based in Quebec, Canada. For anything in this policy, reach us at hello@boardgamecaddy.com.

Board Game Caddy is not affiliated with, endorsed by, or sponsored by BoardGameGeek.

What we collect

When you sign in

You sign in with your BoardGameGeek account. We store your BGG username and your numeric BGG user id, so that renaming your BGG account keeps your data attached to you instead of orphaning it.

Your BoardGameGeek password is never stored. It is passed once to BoardGameGeek to authenticate you, and what comes back is a session token. That token is stored encrypted at rest and used only to sync your data with BGG on your behalf.

We do not collect your email address, your real name, or your date of birth. There is no separate Board Game Caddy password to lose.

Your game data

Once you are signed in, the app syncs and stores:

  • Your BoardGameGeek collection and its details
  • Your play history from BoardGameGeek
  • Players you create, game nights you run, and plays you log in the app
  • Scores, ratings and skill ratings derived from those plays
  • Your preferences, tags, game sets, and any custom cover images you upload

Plays and game nights you log in the app are written back to your BoardGameGeek account, because that is the point of the app. Nothing is sent anywhere else.

Technical data

Our servers keep standard request logs, which include IP addresses. We use them to keep the service running, to rate-limit sign-in attempts, and to investigate abuse. Sensitive values are redacted from logs.

The app also reports client-side errors back to us so we can find bugs. Those reports describe what broke, not what you were doing.

Cookies

In the app, we set one essential cookie: your sign-in session, so the app knows which browser is yours. It is HTTP-only and lasts 30 days. That is the only cookie the app sets. No analytics cookies, no advertising cookies, no third-party cookies.

On this marketing site (boardgamecaddy.com), we use Google Analytics to understand how many people visit and which pages they read. It sets its own cookies and shares data with Google, so we ask first. Until you accept, Analytics is not loaded at all and no analytics cookies exist. Decline and it never loads.

Your answer is remembered in your browser's local storage rather than in a cookie, so remembering that you said no does not itself require the thing you said no to. We also honour your browser's "Do Not Track" setting: with it enabled, Analytics never loads and we do not even ask. IP anonymisation is switched on. Blocking it with any content blocker is fine too, and nothing on this site will break.

Changed your mind, either way? .

Who else sees your data

We use a small number of providers, and only for running the service:

  • BoardGameGeek is where your collection and plays come from and go back to. Your use of BGG is governed by their own terms and privacy policy.
  • Cloudflare sits in front of the site for DNS, delivery and security. It processes connection data such as your IP address.
  • Our hosting provider runs the server and database that hold your data.
  • Google Analytics, on this marketing site only, as described above.

We do not sell your data, rent it, or share it with advertisers. There is no advertising on Board Game Caddy and none is planned. We would only ever disclose data if a valid legal process required it.

Your choices

  • Export it. The app has built-in export for your library and plays, so you can take your data with you at any time.
  • Delete it. Email hello@boardgamecaddy.com and we will delete your account and its data. Data already written to your BoardGameGeek account stays on BGG, since that account is yours, not ours.
  • Disconnect. Changing your BoardGameGeek password invalidates the stored session token, which stops all syncing.
  • See it or correct it. Ask us and we will tell you what we hold.

Depending on where you live, you may have additional rights over your personal information, including under Quebec's Law 25, Canada's PIPEDA, and the GDPR. We apply the choices above to everyone regardless of location.

How long we keep it

Your account data is kept while your account exists. Request deletion and it goes. Request logs are kept for a short period for security and debugging, then rotated out.

Security

Traffic is encrypted in transit with HTTPS. BoardGameGeek session tokens are encrypted at rest. Sign-in is rate-limited to blunt brute-force attempts. No system is perfect, but this is a project built by someone who takes it seriously rather than a growth-first startup that treats your data as inventory.

Children

Board Game Caddy is not directed at children under 13, and we do not knowingly collect their information. Signing in requires a BoardGameGeek account, which has its own age requirements.

Beta software

Board Game Caddy is currently in invite-only beta. Keep your own backups of anything irreplaceable, and remember that your plays also live on BoardGameGeek.

Changes to this policy

If this policy changes in a way that matters, we will update the date at the top and, for anything significant, tell beta testers directly.

Contact

Questions, deletion requests, or anything else: hello@boardgamecaddy.com.