Meeple Collection

Privacy Policy

Last updated August 17, 2026

Meeple Collection (“we”, “us”) lets you track your board game collection, log plays, rate games, and optionally share a read-only view of your collection via a public link. This policy explains what data we collect, why, and how it's handled.

1. Information we collect

Account information. When you sign up we collect the email address and password you provide, or, if you sign in with Google, the name, email address, and profile photo Google shares with us. We never see or store your password in plain text — authentication is handled by Firebase Authentication.

Profile information. A display name and, optionally, a profile color you choose.

Collection and play data. The games you add to your collection, ratings, tags, and notes; the plays you log, including who you played with, scores, and dates; and any photos you attach to a play.

People you add. Names (and, if you send an invite, an email address) for friends or other players you record against your plays, so we can attribute plays and show shared play history. Anyone you invite can see the plays you've tagged them in once they accept.

Live session data. The HP counter and score counter features create short-lived session records (player names and running scores/health totals) so a shared game session can sync across devices in real time. These are deleted automatically a short time after the session ends.

Content you choose to publish. If you enable a public share link, the games in your collection that you've marked owned (and their metadata) become visible to anyone with the link, for as long as it stays enabled. Play details (participants, dates) and other players' names are never included in a published share link.

Usage data. We use product analytics (PostHog) to understand how the app is used — for example, page views and events like signing up, adding a game, or logging a play. This may include your device/browser type and general usage patterns, tied to your account once you're signed in.

Technical data. Our hosting provider (Vercel) and infrastructure provider (Google Cloud/Firebase) automatically log standard technical information (such as IP address and request metadata) needed to operate and secure the service.

2. How we use this information

  • To provide the core features of the app: your collection, play log, ratings, and stats.
  • To authenticate you and keep your account secure.
  • To power features you opt into, such as public share links, invites, and live multiplayer counters.
  • To send transactional email (for example, invite emails) when you use those features.
  • To understand aggregate usage and improve the app.
  • To detect, prevent, and address abuse, fraud, or technical issues.

3. Board game data from BoardGameGeek

When you add a game, you can optionally search and autofill its details (title, cover art, players, playtime, publisher, complexity, rating) from BoardGameGeek (BGG). Only your search terms are sent to BGG's public API — no personal account information is shared with BGG. This metadata is cached and shared across Meeple Collection users who own the same game, since it describes the game itself, not you. We are not affiliated with or endorsed by BoardGameGeek. “How to play” video results are similarly looked up via the YouTube Data API using the game's title.

4. Who we share data with

We don't sell your data. We share it only with:

  • Service providers who process data on our behalf to run the app: Google Firebase (authentication, database, file storage), Vercel (hosting), Resend (transactional email for invites), and PostHog (product analytics).
  • Other users, if you choose to share. Anyone with a public share link you've enabled can see the collection data included in that snapshot. People you invite can see plays you've tagged them in.
  • Legal or safety reasons, if required to comply with the law, enforce our Terms of Service, or protect the rights, property, or safety of our users or the public.

5. Data retention and deletion

  • Your collection, play history, and profile are kept for as long as your account exists.
  • Live HP counter/score counter sessions are ephemeral and automatically purged shortly after they end.
  • Pending invites that go unanswered are automatically purged some time after they expire.
  • You can request deletion of your account and associated data at any time by contacting us (see “Contact us” below); we'll delete it except where we need to retain limited information for legal or security reasons.

6. Your choices

  • You can edit or remove games, plays, ratings, and people you've added at any time.
  • You can disable a public share link at any time, which stops new access to that snapshot.
  • You can ask us to export or delete your account data by contacting us.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and access controls that route all database access through authenticated server-side code rather than exposing it directly to the client. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Children's privacy

Meeple Collection is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we'll delete it.

9. International users

Our service providers may process and store data in the United States or other countries. By using Meeple Collection, you understand your information may be transferred to and processed in countries other than your own.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you directly.

11. Contact us

Questions about this policy or your data? Email us at privacy@meeple-collection.com.

Privacy Policy · Terms of Service