This policy explains what information bgbazaar.ae and the Board Game Bazaar apps (the “site”) collect, why, and the choices you have. The site is run by Agnes, a private individual, for the Board Game Bazaar community. Contact: [email protected].
Browsing without an account
You can browse games and sellers without an account. Saving games to My List needs an account.
Information we collect
- Account details: your name, email address and username, and your password, which is stored only in an encrypted (hashed) form we cannot read. Your username is public; your name and email address are not. We also keep usernames you have given up, reserved for you, so others can’t take them.
- Signing in with Google (optional): if you choose “Continue with Google”, we receive your name, email address and profile picture from your Google account. We don’t receive your Google password.
- Signing in with Apple (optional, in the iPhone app): if you choose “Continue with Apple”, Apple sends us your name (the first time only) and either your email address or, if you choose “Hide My Email”, a private relay address. We don’t receive your Apple ID password.
- Sign-in information: when you sign in we store a session record that includes your IP address and browser type, and set a cookie that keeps you signed in.
- Game requests: the games you request. They are stored against a coded identifier rather than your name, and we keep a coded (not readable) version of your network address only to prevent spam.
- Searches: the words people search for, counted anonymously to see which games are in demand. Searches are not linked to you.
- Sellers: the games you list, prices, conditions, notes and photos. Listings, photos and usernames are public, and your seller page shows the games you have listed. Location and camera details are removed from photos before they are stored. Copies you have sold stay visible for 30 days.
- My List: the games and copies you save, stored with your account so your list is the same in the app and on the website, and so we can tell you when a saved game gets cheaper or a saved copy is reserved or sold (if you have those notifications on).
- App notifications (optional): if you turn on notifications in the Board Game Bazaar app, we store your phone’s notification token (from Google Firebase Cloud Messaging, which delivers to iPhones through Apple’s push service) against your account, and which notifications you want: a game you requested is listed, price drops or sales on My List, and announcements about the Bazaar. Turn them off on Your profile, or sign out on that phone, and the token is deleted.
- Reports: if you report a listing, we store the reason and any details you write, your account if you’re signed in, and a coded (not readable) version of your network address to prevent abuse. The organiser receives the report by email.
- Activity log: changes to listings, and account actions, are recorded with the name of the person who made them so the organiser can keep the catalogue accurate.
- WhatsApp (sellers): to list games you add a WhatsApp number so buyers can reach you, and we store it. It isn’t shown on the site, but a buyer who taps the WhatsApp button opens a chat with you, so they will see it. We record when the button is used, and by which account if the buyer is signed in, so the organiser can see interest in each listing.
- Error reports: when the website or app hits an error, technical details (the page, browser or app version, and where in our code it happened) are sent to Sentry, our error-tracking service in the EU, so we can fix it. They don’t include your name, email address or IP address.
- Technical information: like most websites, the systems that run the site may record technical data such as IP address, browser type and the pages requested, to keep the site working and secure.
How we use it
We only email you about your account: a link to confirm your email address when you sign up, and, if you ask, a link to reset your password. We don’t send newsletters or marketing.
To run the site and your account, show listings, let sellers manage their listings, understand which games are in demand, and prevent spam and misuse. We do not sell your information, show advertising, or use tracking or advertising cookies.
Cookies and device storage
We only use a cookie that is needed to keep you signed in. Your browser’s storage also keeps a copy of My List so it shows quickly (cleared when you sign out), your light or dark mode choice, and that you’ve seen the welcome notice. None of this is used to track you.
Who can see your information
Your email and account details are not shown publicly. Sellers’ listings, photos and usernames are public. We do not share personal information with anyone else, except with the services that help us run the site, only so they can do so: Coolify on our own server (the site and its database), Cloudflare (delivering the site and storing photos), Resend (sending account emails), Google Firebase and Apple (app notifications), Google and Apple (if you sign in with them) and Sentry (error reports). We also share it when the law requires it.
How long we keep it
We keep your account and listings for as long as you have an account. When you delete it, your account, sign-ins, username, WhatsApp number and photos are deleted straight away, and your unsold games come off the site; the record of past listings is kept without your account, as is the organiser’s activity log. Request counts and anonymous search counts may be kept without anything that identifies you.
Your choices
- Delete your account yourself from Your profile → Delete account (how it works), or ask to see, correct or delete your information by emailing [email protected].
- Change your password from your account page.
Security
The site uses encrypted connections (HTTPS), stores passwords only in hashed form and limits who can access stored information. No system is perfectly secure, so please use a password you don’t use elsewhere.
Children
There is no minimum age to browse the site. If you are under 18, ask a parent or guardian before you sell games or meet anyone. If you are a parent or guardian and want information about your child removed, email [email protected] and we will delete it.
Changes
We may update this policy. The date at the top shows the latest version.
Contact
Privacy questions or requests: [email protected].