Privacy Policy

Account information — when you sign up, we collect your email address, a username, and a password (stored securely by our authentication provider; we never see or store it in plain text). You can also set an avatar emoji and color.

Content you create — your board game collection and status tags, game sessions, scores, groups, friend connections, chat messages, and any bug reports, feature requests, or other messages you send us through Get in Touch.

Payment information — if you make a donation or purchase, payment is handled entirely by Stripe. We do not collect or store your card number or other payment credentials — see Stripe's privacy policy for how they handle it.

Automatically collected information — standard technical data (such as IP address and browser type) collected by our hosting and database providers as part of normal server operation, and, on pages where ads are shown, advertising identifiers collected by Google AdSense.

• To create and secure your account, and let you sign in
• To provide the features you use — tracking your collection, sessions, scores, groups, friends, and chats
• To send transactional emails (sign-up confirmation, password resets, invites)
• To respond to feedback, bug reports, and support requests
• To process donations and purchases via Stripe
• To show ads, on pages where they're enabled, via Google AdSense
• To maintain, secure, and improve the site

We don't sell your personal information. We share it only with:

• Supabase — our database, authentication, and storage provider, which hosts all account and app data
• Stripe — for processing donations and purchases
• Vercel — our application hosting provider
• Google AdSense — on pages where ads are enabled, for serving ads (Google may use cookies to personalize them)
• Other users — content like your profile, collection, sessions, and scores may be visible to other users, according to the visibility setting (Public, Friends-Only, or Private) you choose in Settings

We use cookies to keep you signed in and remember your preferences. Pages with ads enabled may also set cookies through Google AdSense for ad delivery and personalization — you can manage ad personalization through Google's Ad Settings.

We keep your account information and content for as long as your account is active. If you'd like your account and associated data deleted, reach out through Get in Touch and we'll take care of it.

• Update your account details and avatar any time in Settings
• Control who can see your profile and activity via your privacy setting
• Request access to, correction of, or deletion of your data via Get in Touch

We rely on our providers' security practices (encrypted connections, access controls, and row-level database permissions) to protect your information. No online service can guarantee perfect security, but we take reasonable steps to keep your data safe.

RoastedVault is not directed at children under 13, and we don't knowingly collect information from them.

We may update this policy as the site changes. We'll update the "Last updated" date above when we do.

Questions about this policy or your data? Reach out through Get in Touch.