Privacy

Your marks (Interested, To buy, Bought, Not interested) are kept in your browser's storage, on your device. They are not sent anywhere. Save for offline stores the list and the box art on your device too.

Send to SPIEL app shows a QR code on your screen, which the official SPIEL app reads with its camera. Nothing is sent to this site or anyone else.

Links to the official novelties list, the hall plan and BoardGameGeek open those sites, which have their own privacy policies.

The site is hosted by Vercel (Vercel Inc., USA). Like any web server, Vercel sees your IP address and browser when it serves a page, and keeps request logs for a short time.

Vercel Web Analytics counts page views and which features get used: a mark set, a filter switched on, a search started, a booth opened on the hall plan. Never what you searched for, and never names or emails. It sets no cookies. To tell visitors apart within a day it hashes your IP address and browser into an anonymous id that is discarded after that day. I only ever see totals.

This runs on the legitimate interest of knowing which parts of the site are worth the work (GDPR article 6(1)(f)).

Signing in is optional. It exists to sync your marks between devices and to share them with friends. When you sign in, the site stores:

• Your account id, name, profile photo and email address, as Google or Apple provides them. Apple shares no photo, and your name only if you allow it; if you chose to hide your email, Apple gives a private relay address instead, and that is what is stored. Without a name, the site makes up a player name (like “Wise Worker”). You can change the name the site shows when you edit your profile.
• Each mark you set, with the game and the time you set it.

This is stored with Google's Firebase (Google Ireland Ltd., with Google LLC in the USA as a sub-processor). Your marks and profile live in a Firestore database in the European Union; the sign-in itself is handled by Firebase Authentication in the USA, under Google's data processing terms and the EU-US Data Privacy Framework.

Your browser keeps you signed in using its own storage, which is needed for sign-in to work at all. There are no advertising or tracking cookies on this site.

The legal basis is that you asked for it: storing your marks and profile is what signing in does (GDPR article 6(1)(b)).

If you have an account, I may now and then write to the email address you signed in with, about SpielList itself: a thank-you after the fair, asking how it went, or a change that affects your account. Rarely, never with ads, and your address is never shared or sold.

To stop, reply “no more email” to any of them, or write to hello@spiellist.com, and you won't get another. Deleting your account stops them too. This runs on the legitimate interest of telling the people who use SpielList about it (GDPR article 6(1)(f)).

When you add a friend by email, the site stores that email address together with your name, photo and email as a request. The person sees it when they sign in with that address. If they accept, you both see each other's name, photo, email and marks, until either of you removes the friendship. If they decline, the request is deleted. If they never sign in, it stays until you cancel it or delete your account.

Only add people who'd expect to hear from you. The request is visible only to you and whoever signs in with that address.

Your friends' names, photos and marks are also cached on your device so they show in the halls without a connection. Signing out clears that cache.

Signing in gives you a player page: your first name and last initial, your photo and the games you've marked, at an address with a random code in it (also shown as a QR code). Anyone you give that address to can open it, signed in or not, and so can whoever they pass it on to. It isn't listed or searchable anywhere, on this site or in search engines.

From your page, a signed-in visitor can ask to be your friend. That stores their first name, last initial and photo with yours as a request, which only the two of you see. Nobody becomes your friend, or sees your email, unless you accept.

Your profile, marks and friendships are kept until you delete your account. Friend requests are kept until they are answered, cancelled, or your account is deleted. Marks on your device stay until you clear them or your browser's site data.

Open the account menu (your photo, top right) and choose Delete account. That removes your profile, your synced marks, your friend requests and friendships, your player page, and your sign-in, at once. The marks on your device stay unless you clear them.

Signing out alone does not delete anything: your synced marks wait for your next sign-in.

You can ask to see, correct or delete what the site holds about you, or object to how it's used, by writing to hello@spiellist.com. If you're in the EU, EEA, UK or Switzerland you can also complain to your data protection authority.

No decisions are made about you automatically, and nothing is sold or shared for advertising.

If this page changes, the date at the top changes with it. Anything new that affects a signed-in account will be announced on the site before it applies.