Privacy Policy
Last updated: 19 August 2026
Tabletribe is an app for logging board game sessions and sharing them with friends. This policy explains what personal data we process, why, and what you can do about it.
Who is responsible
Richard van den Bogaard, the Netherlands, is the controller for this processing. Contact: privacy@vandenbogaard.info.
What we process, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address | Signing in — we use a one-time code, there are no passwords | Performance of a contract |
| Profile: username, display name, bio, avatar, preferences | So other people can recognise you | Performance of a contract |
| Player register: names of the people you play with | Recording who took part in a session — see the section below | Legitimate interest |
| Sessions: date, duration, notes, location name, scores, winner | The core purpose of the app | Performance of a contract |
| Photos of a play, and your profile photo | Recording what an evening looked like — see the section below | Performance of a contract |
| Follows, reactions, comments, collection | The social side of the app | Performance of a contract |
| Searches that returned no results | Finding gaps in the game catalogue. Stored without any user identifier | Legitimate interest |
| IP address, timestamp, device type in security logs | Detecting abuse and keeping accounts safe | Legitimate interest |
We do not collect your device location, we do not use advertising or analytics trackers, and we do not process payment details.
People who don't use Tabletribe
When you log a game night, you record who played. Those people are often not Tabletribe users — they are simply a name in your personal player register.
We keep this to a minimum: a name, nothing else. No contact details, no date of birth. If your profile is public, that name is visible to the people who can see that session, in the same way a photo caption names the people in it.
Only enter names of people who don't mind. If you are named in Tabletribe and you would rather not be, email privacy@vandenbogaard.info and we will remove or anonymise the entry. You don't need an account to make that request.
Photos
You can add photos to a play and set a profile photo. Two things you should know about that.
Every photo is checked before anyone else can see it. That is done by an automated service, Sightengine, which only looks at whether the image contains unwanted material. We send nothing but the image itself: no email address, no username, no name of the play. Sightengine therefore cannot link a photo to you. That check may take place outside the European Economic Area — in Canada or the United States — on the basis of the European Commission's standard contractual clauses. While the check is running, the photo is visible to you only.
A photo of a game night often has other people in it. The same applies as for names above: only upload photos that the people in them do not object to. Are you in a photo on Tabletribe and would you rather not be? Email privacy@vandenbogaard.info, also if you do not have an account yourself.
Before a photo leaves your device it is resized and saved again. That removes the hidden information a camera adds — such as the location where the photo was taken. It never reaches us. Photos are not stored at a public address either: they can only be retrieved by people who are allowed to see the play they belong to.
Who else sees your data
We use a small number of providers, each acting on our instructions only:
- Supabase — database and authentication. Data is stored in the EU.
- Resend — sending your sign-in emails.
- Expo — app updates. When the app starts it checks for a new version; this involves your IP address, not your account.
- Sightengine — checking photos for unwanted material. See the section above; the check may take place outside the EEA.
We use game data from BoardGameGeek, but we never send them anything about you — only the identifier of a game.
We do not sell your data, and we never will.
How long we keep it
Your game history is meant to last — that is the point of the app — so we keep it until you delete it or delete your account. Searches without results are deleted after 90 days. Sign-in codes are short-lived. Photos stay until you delete them; deleting a play also deletes the photos attached to it.
When you delete your account, your profile, sessions, collection, follows and reactions are removed, along with your own player register. One thing does not disappear: if someone else recorded you as a player in their register, that entry stays, with your name no longer linked to any account. It has to, otherwise their own game history would lose a participant. Email us if you want that removed as well.
Your rights
You can access, correct, export, delete, restrict, or object to the processing of your data. Two of these are built into the app, under Settings:
- Export my data — a complete JSON file of everything we hold about you.
- Delete my account — immediate and permanent.
For anything else, email privacy@vandenbogaard.info. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Age
You need to be at least 16 to use Tabletribe. We don't ask for your date of birth, because storing one would mean processing more data than we need.
Security
Every table in our database enforces row-level access rules, so one account cannot read another's data. Traffic is encrypted, and there are no passwords to leak — signing in uses a one-time code by email. No system is perfect; if we discover a breach that puts you at risk, we will tell you.
Changes
If this policy changes in a way that matters, we will say so in the app. The date at the top always reflects the current version.