Skip to content
Meeple Guild

Privacy policy

Meeple Guild helps a group decide what to play: it holds your board-game collection, the nights you plan, and the plays you log. It collects what those features need and nothing else. There are no ads. Your data is never sold, and it is never used to build a profile of you for anyone else's benefit.

11 August 2026 · applies to the Meeple Guild app and meepleguild.app

Who this is about

Meeple Guild is an independent app made by Tyler Miller. For anything in this policy, write to [email protected].

What we collect, and why

Your account

An email address and a password (stored only as a salted hash — we never see it), the display name you choose, and a public handle generated from it so friends can find you. You can also set an optional home area — see "Your area" below.

Your area (optional)

Meeple Guild has an optional "Near You" feature that shows other players near you and lets you set a home area. If you turn it on and allow location access, the app takes one approximate reading and immediately reduces it on your phone to a roughly 3-mile area before anything leaves the device — your exact position is never sent to us and never stored. You can set the same area by typing a place name instead, like "Fort Worth, TX", with no location reading at all. Either way the area is used only to show nearby players and mark your home area; it is never sold and never used for advertising or tracking. Being discoverable to nearby players is off until you turn it on, and Near You works even with no area set.

What you put in the app

  • The games in your collection, however you added them
  • Your sleeve records — sleeve size, brand, count, and any note you write
  • The plays you log: game, date, who played, scores and who won
  • Game nights you organize or are invited to, and RSVPs
  • Groups you create and who is in them
  • People you add who don't have accounts — a name you give them, so they can be counted at a table or in a play
  • Friend connections, friend requests, and anyone you block

Settings

Who may see your collection, whether you are discoverable to nearby players (off unless you turn it on), your notification preferences, and the BoardGameGeek username you last imported from.

Your devices

If you allow notifications, we store a push token for that device, along with the device's platform, so we can send the reminders you asked for. The token is removed when you sign out and when you delete your account. If you sign out while offline we cannot reach the server to remove it, so it is cleared instead the next time an account registers on that device — a token only ever belongs to one account at a time. Switching an individual notification category off, or turning notifications off in your device settings, stops the delivery but leaves the token in place until you sign out.

A record of what we sent you

Every push we attempt is logged against your account: the category, the title and the short line it carried, where in the app it pointed, the device token it targeted, and whether it was sent, failed, or had no device to reach. It is how we can tell you why a reminder never arrived. It is kept until you delete your account, and goes with it.

What we never collect

  • Precise location. Location access is optional and always approximate: a reading is reduced to a roughly 3-mile area on your phone before it leaves the device (see "Your area" above), so your exact coordinates, street, or address are never collected, sent, or stored.
  • Your BoardGameGeek password. Importing a BGG collection needs only a public username, read through BoardGameGeek's public API. We never ask for, receive, or store BGG credentials.
  • Your contacts. See below — matching happens on hashes, and the addresses themselves never leave your phone.
  • Payment details. The optional Pro upgrade — a monthly or annual subscription — is billed by the App Store or Google Play. Your card details go to Apple or Google and never to us. RevenueCat processes the purchase record so the app knows Pro is active (see the processor list below); it never sees your payment method either.
  • Advertising identifiers. No ad networks, and no advertising id. Nothing in Meeple Guild follows you across other apps or websites, and no data about you is ever sold. The one outside service that sees how you use the app is our own product analytics — see below.

Finding friends from your contacts

If you choose to look for friends in your contacts, the app asks for contacts permission, then hashes each email address on your device (SHA-256) and sends only those hashes. The server compares them against hashes of its own accounts and returns the matches. Raw addresses never leave the phone, the hashes are used for that one comparison and not stored, and the feature does nothing until you ask for it.

Who can see your collection

By default your shelf is shared with the people at game nights you join — that is what makes "what can we all play" work — and with nobody else. You can change it whenever you like in Settings: friends, only people at the same game night, or nobody at all. Suggestions for a night are built from the collections of the people who confirmed they are coming, within whatever each of them allows.

Notifications

Push notifications (game-night reminders, invitations, friend requests) are delivered through Expo's push service, which relays the message to Apple's or Google's notification service. A notification carries only what you would see on the lock screen — a title, a short line, and where in the app to open.

Product analytics

To understand which features are used and which need work, the Meeple Guild app and this website both send usage events to PostHog. From the app that is: the screens you open, things like "a collection import finished" or "a game night was created", how long a session lasts, and which app version, device model, operating system, language, time zone and screen size you are running — all tied to your account. A screen is recorded by its place in the app, never by what is on it: opening a game records "a game screen", not which game. From this website it is pages, presses, and how quickly they load, described under "This website" below.

These events are used only to improve Meeple Guild: no advertising, no profiling for anyone else's benefit, and nothing is shared beyond the processors listed below. We never record your screen or play a session back, and nothing you type is captured.

Two random identifiers appear in this, and neither is your name or your email. One is the id your account is known by internally, which is what ties these events to you once you are signed in. The other belongs to the app's installation on your device, and it is what events recorded before you sign in are attached to; it is not an advertising id, it is not shared with anyone, and it cannot be read by any other app. Reinstalling the app replaces it.

When you delete your account, the account id is destroyed along with everything else, so what is left in the analytics points to nobody and cannot be traced back to you. If you would rather those events were erased outright, write to [email protected] and we will delete them.

Who else handles your data

Meeple Guild is small, and so is this list. Data is processed by Railway, which hosts the API and its PostgreSQL database in the United States (US East, Virginia); Cloudflare, which provides DNS and the secure tunnel that all traffic to the app and this website passes through — the API and website are not directly reachable except through it; Expo's push service for notifications; PostHog for the product analytics described above, from both the app and this website; RevenueCat for Pro purchase records; and Resend for the email we send ourselves (operational alerts today, a password-reset code when that ships). None of them are permitted to use your data for their own purposes. Wherever you use Meeple Guild from, your data is stored and processed in the United States.

BoardGameGeek is not a processor: when you import, we read a public collection from their API. That is a request we make on your behalf, and nothing of yours is sent to them.

How long we keep it

As long as your account exists. There is no scheduled purge, because a play you logged five years ago is exactly the history the app exists to keep.

Deleting your account

You can delete your account from Settings › Account inside the app, or ask us to do it — see Delete your account. Deletion is immediate and permanent: there is no hold period and no restore.

What is yours is erased — profile, credentials, settings, collection, sleeve records, plays and nights you created, your groups, your friend connections, the people you manage, and your RSVPs to nights that haven't happened yet.

What lives inside someone else's record is not erased, because it is their history: a play they logged, or a past night they hosted, where you were at the table. In those rows the link to your account is removed and your name becomes "Deleted player". Nothing in the row points back to you.

Getting a copy of your data

Settings › Your data exports your collection and your play history as CSV files, any time, without asking us. Do it before deleting your account — afterwards there is nothing left to export.

This website

PostHog is the only analytics this website loads, and it collects the same kind of usage events the app does: which pages you view, which links and buttons you press, and roughly how long you stay. To tell one visit apart from the next, it stores a random identifier in your browser — in a cookie and in local storage. That identifier is not your name or your email and is never matched to them — if you have never given us an address, nothing here knows who you are. PostHog also uses the IP address to work out roughly where in the world a visit came from, at about the level of a city. The app does not do this — only the website.

PostHog also times the page itself: how soon the main content appears, how much the layout shifts while it loads, and how quickly the page answers the first time you press anything. Those are stopwatch readings of the site's own speed, not new information about you, and they are how we can tell a page is slow on a real phone rather than on a fast laptop.

None of this is used for advertising: no ad network is involved, nothing follows you to any other website, no profile of you is built for anyone else's benefit, and none of it is sold. You can remove the identifier any time by clearing this site's cookies and site data in your browser.

Children

Meeple Guild is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has an account, write to us and we will remove it.

Your rights

Wherever you live, you can access, correct, export, and permanently delete your data — not by writing to us and waiting, but directly in the app: edit your profile, export your data from Settings, delete your account. These work for everyone, regardless of jurisdiction, because they are how the app is built rather than a legal accommodation. For anything they don't cover, write to [email protected].

Changes

If this policy changes in a way that affects what we collect or who sees it, the app will say so before the change takes effect. The date at the top always reflects the current version.