Privacy Policy
This policy describes what data we collect when you use the mobile app and website, how we use it, how we protect it, and what rights you have.
1. Data controller
Controller: Meeple board game club (Epic Board Games), Vidnoye, Russia.
Website: epicboard.games
Privacy contact (same as “About the club”): Telegram t.me/L_Nogard, phone 89267102030.
2. Data we collect
- Account: username (Telegram), first and last name, password (hashed on the server), and optionally email, phone, birth date, and profile comment.
- Session: session identifier (HTTP cookie on the web; local storage on mobile) to keep you signed in.
- Visits and memberships: game sign-ups (hosts), Geek status, visit history, and in-club payment records (processed on our server, not via Google Play).
- Telegram: when you connect @epicboardgames_bot, your Telegram username for personal game notifications.
- Images: photos uploaded by club staff for game descriptions and site pages (regular members upload images only with administrator rights).
3. Required and optional data
Required to create an account: Telegram username, password, first and last name, birth date.
Optional: email, phone, profile comment, Telegram display names.
You can use parts of the app without an account (schedule and game catalog). Account features (profile, sign-ups, Geek status) require registration.
4. How we use data
- Registration, sign-in, and member profile management.
- Game sign-ups, schedule, and board game catalog.
- Tracking visits, Geek memberships, and in-club payments (cash, transfer, card — outside Google Play).
- Sending notifications via the Telegram bot (when you opt in).
- Club staff operations (schedule administration, reports) — authorized staff only.
5. Sharing with third parties
We do not sell personal data. Data may be shared:
- with our API at
https://epicboard.games/apito operate the app and website; - with Telegram — only if you connect the bot for notifications;
- with authorities when required by law.
The app does not include ad SDKs, Firebase Analytics, Google Play Billing, or advertising ID collection. Third-party libraries (e.g. for opening links or picking images) do not receive your personal data for their own purposes.
6. Storage and security
- Data is stored on the club’s secured server.
- All communication with our API uses HTTPS (TLS) in production.
- Passwords are stored using one-way hashing, not in plain text.
- Session cookies are HTTP-only on the web. You can sign out in the app to end the active session on your device.
7. Data retention
- Active account data is kept while your account exists.
- Sessions expire after a period of inactivity or when you sign out.
- After account deletion (see below), user-aligned data is removed within 5 business days, except minimal records we must keep by law or for legitimate purposes (e.g. accounting, fraud prevention).
8. Account deletion
The app allows account creation; you can request permanent deletion as follows:
- On the web: epicboard.games/delete-account.html
After we verify your request, we delete your account and all user-aligned data within 5 business days. Temporary deactivation or sign-out does not count as deletion.
9. Your rights
You may request access to your data or correction of inaccurate data by contacting us through the channels above. You may withdraw Telegram notification consent by disconnecting the bot.
10. Children
The app is for board game club members; the audience is adults and teens with parental consent when visiting the club. Registration requires a minimum age per app rules. We do not knowingly collect data from children under 13 without a legal guardian’s consent.
11. Changes
We may update this policy. The current version is always at epicboard.games/privacy.html.