Meeple Guild

Privacy policy

Draft — under review. This policy describes how Meeple Guild is built to handle your data, but it has not yet been reviewed or approved for publication. Treat it as a statement of intent, not a final agreement. Questions or corrections: [email protected].

Meeple Guild helps a group decide what to play: it holds your board-game collection, the nights you plan, and the plays you log. It collects what those features need and nothing else. There are no ads. Your data is never sold, and it is never used to build a profile of you for anyone else's benefit.

Draft of 24 July 2026 · applies to the Meeple Guild app and meepleguild.app

Who this is about

Meeple Guild is an independent app made by Tyler Miller. For anything in this policy, write to [email protected].

What we collect, and why

Your account

An email address and a password (stored only as a salted hash — we never see it), the display name you choose, and a public handle generated from it so friends can find you. You can also add a home area: free text like "Fort Worth, TX" that you type yourself.

What you put in the app

  • The games in your collection, however you added them
  • Your sleeve records — sleeve size, brand, count, and any note you write
  • The plays you log: game, date, who played, scores and who won
  • Game nights you organize or are invited to, and RSVPs
  • Groups you create and who is in them
  • People you add who don't have accounts — a name you give them, so they can be counted at a table or in a play
  • Friend connections, friend requests, and anyone you block

Settings

Who may see your collection, whether you are discoverable to nearby players (off unless you turn it on), your notification preferences, and the BoardGameGeek username you last imported from.

Your devices

If you allow notifications, we store a push token for that device, along with the device's platform, so we can send the reminders you asked for. The token is removed when you sign out and when you delete your account. If you sign out while offline we cannot reach the server to remove it, so it is cleared instead the next time an account registers on that device — a token only ever belongs to one account at a time. Switching an individual notification category off, or turning notifications off in your device settings, stops the delivery but leaves the token in place until you sign out.

A record of what we sent you

Every push we attempt is logged against your account: the category, the title and the short line it carried, where in the app it pointed, the device token it targeted, and whether it was sent, failed, or had no device to reach. It is how we can tell you why a reminder never arrived. It is kept until you delete your account, and goes with it.

What we never collect

  • Precise location. There is no GPS, no map, and no location permission. Home area is text you typed and nothing resolves it to coordinates.
  • Your BoardGameGeek password. Importing a BGG collection needs only a public username, read through BoardGameGeek's public API. We never ask for, receive, or store BGG credentials.
  • Your contacts. See below — matching happens on hashes, and the addresses themselves never leave your phone.
  • Payment details. Meeple Guild takes no payments today. If a paid tier arrives, it will run through the app stores, which handle payment data themselves.
  • Advertising identifiers. No ad networks, no third-party trackers in the app.

Finding friends from your contacts

If you choose to look for friends in your contacts, the app asks for contacts permission, then hashes each email address on your device (SHA-256) and sends only those hashes. The server compares them against hashes of its own accounts and returns the matches. Raw addresses never leave the phone, the hashes are used for that one comparison and not stored, and the feature does nothing until you ask for it.

Who can see your collection

By default your shelf is shared with the people at game nights you join — that is what makes "what can we all play" work — and with nobody else. You can change it whenever you like in Settings: friends, only people at the same game night, or nobody at all. Suggestions for a night are built from the collections of the people who confirmed they are coming, within whatever each of them allows.

Notifications

Push notifications (game-night reminders, invitations, friend requests) are delivered through Expo's push service, which relays the message to Apple's or Google's notification service. A notification carries only what you would see on the lock screen — a title, a short line, and where in the app to open.

Who else handles your data

Meeple Guild is small, and so is this list. Data is processed by our hosting provider (the API and its PostgreSQL database), by Cloudflare, which serves and protects meepleguild.app, and by Expo's push service for notifications. When we begin sending transactional email — a password-reset code is the only one planned — an email provider will be added to this list first. None of them are permitted to use your data for their own purposes.

BoardGameGeek is not a processor: when you import, we read a public collection from their API. That is a request we make on your behalf, and nothing of yours is sent to them.

How long we keep it

As long as your account exists. There is no scheduled purge, because a play you logged five years ago is exactly the history the app exists to keep.

Deleting your account

You can delete your account from Settings › Account inside the app, or ask us to do it — see Delete your account. Deletion is immediate and permanent: there is no hold period and no restore.

What is yours is erased — profile, credentials, settings, collection, sleeve records, plays and nights you created, your groups, your friend connections, the people you manage, and your RSVPs to nights that haven't happened yet.

What lives inside someone else's record is not erased, because it is their history: a play they logged, or a past night they hosted, where you were at the table. In those rows the link to your account is removed and your name becomes "Deleted player". Nothing in the row points back to you.

Getting a copy of your data

Settings › Your data exports your collection and your play history as CSV files, any time, without asking us. Do it before deleting your account — afterwards there is nothing left to export.

This website

meepleguild.app uses Cloudflare Web Analytics, which counts page views without cookies and without building a profile of visitors. The site sets no advertising or tracking cookies.

Children

Meeple Guild is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has an account, write to us and we will remove it.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your data, and to object to how it is handled. The app already gives you all of those directly — edit your profile, export your CSVs, delete your account — and for anything it doesn't cover, write to [email protected].

Changes

If this policy changes in a way that affects what we collect or who sees it, the app will say so before the change takes effect. The date at the top always reflects the current version.