Backgammon Circle
Privacy Policy
Version 3.0, effective from 20 November 2026
The French version of this document is the only legally binding version. This English translation is provided for information only, for users who do not read French; in case of any discrepancy, the French version prevails.
This policy describes the personal data Backgammon Circle processes when you use backgammoncircle.com and the Backgammon Circle applications (the "Service"), why, for how long, with whom, and what your rights are. It applies in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
Backgammon Circle, SASU with a share capital of €2,000, 47 rue Vivienne, 75002 Paris, France, Paris Trade and Companies Register no. 130 976 210, represented by its President, Nicolas Andrieu.
Contact for personal data: privacy@backgammoncircle.com. Backgammon Circle has not appointed a data protection officer.
2. Data processed, purposes and legal bases
| Category | Data | Purpose | Legal basis |
|---|---|---|---|
| Account | Email, username, hashed password, language, registration date, email verification | Account creation and management, authentication | Performance of contract |
| Third-party sign-in | Google or Apple identifier, name and photo passed by those services | Authentication | Performance of contract |
| Profile | Country (derived from IP address at registration, editable), city, biography, photo, displayed badges | Public profile, community | Performance of contract |
| Play | Games (moves, results, duration), Elo rating, analyses, play quality, mistakes, course progress, exercises, league, tournaments, badges, streaks | Provision of the Service, rankings, progress | Performance of contract |
| Behaviour | Behaviour score and its log, tournament no-shows | Proper running of games and tournaments | Legitimate interest (quality of Service) |
| Presence | Last login, online or in-game status | Social features | Performance of contract |
| Communications | Private messages, correspondence game chats, club posts and chats, messages to support | Provision of the Service | Performance of contract |
| Relationships | Friends, challenges, blocks, clubs and roles, followed professional players | Social features | Performance of contract |
| Reports | Reports made and received, moderation measures | Moderation, safety | Legitimate interest, legal obligation |
| Device | Notification token, browser or device model | Notifications | Consent |
| Billing | Plan, dates, purchase source, founder status, customer identifier at the payment provider, usage counters, payment events | Performance of paid offers, accounting | Performance of contract, legal obligation |
| Consents | Date, version of accepted documents, IP address, age declaration, newsletter choice | Proof of consent | Legal obligation, legitimate interest |
| Invitations | Email of the invited person, user who sent the invitation | Sending the invitation | Legitimate interest |
| Analytics | Usage events linked to the account (username, email, Elo, country), via PostHog | Service improvement | Consent |
| Campaign measurement | Google Ads conversion event | Measuring campaign effectiveness | Consent |
| Newsletter | Email, subscription choice | Information and offers | Consent |
Backgammon Circle collects no date of birth, postal address, phone number or bank data. Card data is processed exclusively by the payment provider.
IP addresses are stored only with consent and deletion records; they are otherwise used in memory, without storage, to prevent abuse.
3. Specific processing
Rating and skill profiling. Your Elo rating, play quality and mistakes are calculated automatically from your games. They determine the opponents offered to you and appear on your public profile. These calculations have no legal effect on you.
Behaviour score. This automatic score is a condition for creating a tournament. You can view its log and dispute any change at contact@backgammoncircle.com, which carries out a human review.
Public profile. Your username, country, photo, biography, statistics and history are visible to everyone and may be indexed by search engines. You can limit visibility or request non-indexing in your settings.
Messages. Private and club messages are stored unencrypted on our servers. Backgammon Circle accesses them only in case of a report concerning them or at the request of an authorised authority. When a recipient is offline, an email with a preview of the message is sent to them.
AI-generated content. "Maestro André" comments and blog translations are produced with an Anthropic model. No user personal data is passed to this provider: only game positions and editorial texts are sent.
4. Retention periods
| Data | Period |
|---|---|
| Account and profile data | Life of the account, then 30 days of deactivation, then deletion |
| Games against other users | Kept in the opponent's history in anonymised form after account deletion |
| Games against a bot, analyses, progress | Deleted with the account |
| Private messages | Life of the account; conversations inactive for 2 years are deleted |
| Club posts and chats | Text kept in the club, author anonymised on account deletion |
| Reports and moderation measures | 3 years after closure, 5 years if disputed |
| Consent records | Life of the account plus 5 years, in reduced form (hashed email, date, version, IP) |
| Deletion log | 1 year (hashed email, date, IP address) |
| Email of invited persons | 30 days, then deleted if no registration |
| Newsletter | Until unsubscription; purged after 3 years without opening |
| Billing data and invoices | 10 years from the close of the financial year (accounting obligation) |
| Usage counters and challenge log | Deleted with the account |
| Notifications | 90 days |
| Server technical logs | 12 months |
| Inactive accounts | Deleted after 36 months without login, after a warning 30 days beforehand |
5. Recipients and processors
Data is processed by Backgammon Circle and by the following providers, for the stated purposes only, under data processing agreements compliant with Article 28 GDPR.
| Provider | Role | Data | Location |
|---|---|---|---|
| Railway Corp. | Hosting of the server, database and game engines | All Service data | United States (US East region) |
| Vercel Inc. | Website hosting; Vercel Analytics audience measurement without cookies or identification | Pages viewed, truncated IP address | United States |
| Cloudflare Inc. | Domain names, security, routing of traffic and incoming email | IP address | United States, global network |
| Resend Inc. | Email sending | Email, username, email content | United States |
| Stripe Payments Europe Ltd | Website payments, invoices, customer portal | Email, account identifier, card data (at Stripe only), billing address if any | Ireland, United States |
| RevenueCat Inc. | In-app purchase management | Account identifier, purchases | United States |
| Apple Inc. | Sign in with Apple, App Store, iOS notifications | Apple identifier, email, purchases, notification token | United States |
| Google LLC and Google Ireland Ltd | Sign in with Google, Google Play, Android notifications, Google Ads conversion measurement after consent | Google identifier, email, name, photo, purchases, conversion event | Ireland, United States |
| Expo (650 Industries Inc.) | Routing of app notifications | Device token, notification text | United States |
| Browser push services (Google, Mozilla, Apple, Microsoft) | Website notifications | Encrypted notification content | Varies |
| PostHog Inc. | Audience measurement after consent | Identifier, username, email, Elo, country, usage events | European Union |
| Anthropic PBC | Generation of teaching comments and translations | No personal data | United States |
Fonts are hosted with the website. IP geolocation uses a local database (MaxMind GeoLite2), with no transmission to a third party. This product includes GeoLite2 data created by MaxMind.
Backgammon Circle sells no personal data. If advertising is activated, the Cookie Policy will be updated and your consent will be collected before any data is shared with an advertising partner.
Data may be disclosed to authorities legally entitled to request it.
6. Transfers outside the European Union
Several providers are established in the United States. Transfers rely on the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) for certified providers, and on the European Commission's standard contractual clauses for the others, with the supplementary measures set out in their data processing agreements. A copy of the applicable safeguards may be requested at privacy@backgammoncircle.com.
7. Security
Hashed passwords (bcrypt), encrypted connections (TLS), revocable sessions, rate limiting, security headers, removal of metadata from uploaded images, encryption at rest provided by the host. Access to data is limited to the publisher.
8. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time and to give instructions on the fate of your data after your death.
You can exercise directly, in your settings: editing your profile, photo and password; deleting your account; managing your emails and notifications; managing your cookies; the visibility of your profile; unlinking your Google or Apple account.
For other requests, including exporting your data in a structured format and changing your email address, write to privacy@backgammoncircle.com. We reply within one month, extendable by two months for complex requests. Proof of identity may be requested in case of doubt.
You may lodge a complaint with the CNIL (www.cnil.fr) or with the supervisory authority of your country of residence.
9. Minors
The Service is open from age 13. Below the digital age of consent in your country, your registration requires the agreement of your legal guardian, who may exercise your rights on your behalf. If you believe a minor has registered without that agreement, write to privacy@backgammoncircle.com.
10. Changes
Any substantial change to this policy is notified by email and by a notice on the Service at least thirty days before it takes effect. The current version is always available on the website and in the application.
11. Languages
This policy is written in French, the only legally binding version; the English translation is provided for information. In case of any discrepancy, the French version prevails.