Privacy Policy

Effective Date: April 21, 2026
This Privacy Policy explains how Meeple Tracker ("we", "our", or "us") collects, uses, and protects your information.

1. Information We Collect

We collect the following types of data:

• Authentication data: If you sign in with Apple, we may collect your Apple-provided user ID and email (if shared).
• Collection data: When you add board games to your collection, we store information like game title and dates.
• Session data: When you track board game sessions, we store information like game title, scores, player names, duration, and dates.
• Shared data: If you choose to share a session with another user, that session's data becomes visible to them.
• Search queries: When you search for board games within the app, your search terms are sent to a self-hosted server and to the BoardGameGeek API to retrieve results.
• Imported data: If you manually connect a BoardGameGeek account or import data via the BoardGameGeek API, we may collect information such as games owned, previously played sessions, and collection details. This happens only with your explicit action.
• Feedback data: If you submit bug reports or feedback, we collect the data you provide.
• Crash logs & diagnostics: We use Sentry to collect crash reports. These may include personal identifiers such as your user ID, device info, OS version, or app state when the error occurred.

2. How We Use Your Data

We use your data to:

• Provide and improve the Meeple Tracker app
• Generate personal and global gameplay statistics
• Enable optional session sharing between users
• Import game data on your request via the BoardGameGeek API
• Analyze crashes and fix bugs (via Sentry)
• Respond to feedback or support inquiries

3. How We Store and Protect Your Data

Your data is securely stored in Google Firebase (Firestore and Firebase Authentication). Firebase provides encryption in transit and at rest.

Game search functionality is powered by a self-hosted server running on dedicated hardware. Queries are routed through Cloudflare (as a secure tunnel/proxy). No personal user data is permanently stored on this server — only a local cache of publicly available game metadata sourced from BoardGameGeek. Cloudflare may process request metadata (such as IP addresses) in transit; see Cloudflare's privacy policy linked below.

Access to your data is restricted and only used to operate and maintain the service. Crash reports via Sentry are stored on secure servers and are only accessible by authorized developers.

4. Third-Party Services

We use the following services:

• Firebase (by Google) – authentication, data storage, and cloud functions
• Sentry – error reporting and performance monitoring; may collect your user ID and technical logs to help us diagnose issues
• BoardGameGeek API – to fetch game metadata or import user-specific collections and sessions, only when you explicitly choose to do so
• Cloudflare – used as a secure tunnel/proxy for the self-hosted search service; may process IP addresses and request metadata in transit
• Self-hosted server – a privately operated server that processes game search queries and stores a local cache of public BoardGameGeek game data

These providers have their own privacy policies. You can view them here:

• Firebase Privacy and Security
• Sentry Privacy Policy
• BoardGameGeek Privacy Policy
• Cloudflare Privacy Policy

5. Data Sharing and Disclosure

We do not sell your data. We only share it:

• With other users when you explicitly share a session
• With service providers to operate the service (e.g., Firebase, Sentry)
• When required by law or in response to legal requests

6. Data Retention

We retain your data as long as your account is active. If you delete your account, we will delete your personal and gameplay data, unless legal obligations require us to retain some records.

7. Your Rights

You have the right to:

• Access, correct, or delete your personal data
• Withdraw consent where applicable
• Request account deletion directly from the app or by contacting us

8. Children's Privacy

Meeple Tracker is not intended for children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect data from children.

9. International Users

We are based in Germany including our self-hosted server, but our cloud infrastructure (via Google and Sentry) may process data in the EU, US, or other countries. By using the app, you consent to the transfer of your data to these locations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. You will be notified via the app or this page if changes are material.

11. Contact

If you have any questions or requests regarding this Privacy Policy, please contact us at:
meepletracker@icloud.com