Privacy Policy

1. Information we collect

Depending on the features you use, we may collect:

• Account details such as name, display name, email address, authentication provider identifiers, and the one-time sign-in codes we email you.
• Profile details such as profile picture, city, address or location preferences, game preferences, and games on your shelf.
• Event activity such as events organized, invitations, requests, attendance, substitutions, ratings, and event messages.
• Private-message content, reactions, read status, and related delivery metadata.
• Questions you ask Tavern, our AI game night guide, and the shelf, schedule, want-list and nearby-night details Tavern looks up to answer you.
• If you link a BoardGameGeek account, we store your BGG username and an encrypted copy of your BGG password so we can import your collection and, only when you tap Log this play, record a play on your BGG account. Unlink any time in Settings and we delete the credential immediately.
• Approximate or precise location when you grant device permission.
• Age-assurance results and verification metadata needed to enforce the Service's 18+ requirement. We never collect your date of birth. Your app store's age signal, or your own confirmation that you are 18 or older, is all we record.
• Device, push-notification token, IP address, browser, operating system, crash, diagnostic, security, and usage information.
• Waitlist signups: email, ZIP code, the page you signed up from and the referring site's domain. If you accept a beta invitation we also keep your name (optional), the platforms you named, any Apple ID or Google account address you give us for the store invitation, and your consent record, so we can email you about the beta; every message carries an unsubscribe link.
• Feedback, support requests, referral information, and communications you send to us.

2. How we use information

We use information to:

• Create, authenticate, secure, and administer accounts.
• Enforce the adult-only eligibility requirement.
• Find and recommend nearby events, players, games, and venues.
• Operate messaging, invitations, reminders, notifications, ratings, schedules, and referrals.
• Prevent fraud, abuse, unauthorized access, and security incidents.
• Diagnose errors, measure performance, improve the Service, and respond to support requests.
• Comply with legal obligations and enforce our agreements.

3. We do not sell personal information

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.

4. How information is shared

We may disclose information:

• To other users when you intentionally publish a profile, organize or join an event, post in a game-night chat, send a message, or otherwise use a social feature.
• To service providers that support hosting, email, authentication, maps and places, push notifications, analytics, diagnostics, security, game data (BoardGameGeek, including the optional account link), and AI-assisted features (Anthropic processes Tavern conversations on our behalf and does not use them to train its models).
• When required by law, legal process, or a valid governmental request.
• To protect users, PAG Games LLC, or others from fraud, abuse, security threats, or physical harm.
• As part of a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.

5. Location information

Location features are permission-based. Location may be used to calculate proximity and display nearby events or venues. You can revoke location permission in your device settings and adjust your event-search radius in the Service.

We keep your home address (city and state are shown to others; your street address never is), a recent device location while the app is open, and your chosen location mode (automatic, home, or travelling). Other members only ever see your city and state and whether you are travelling - never a street address, ZIP, coordinates or distance to you. Your home address is sent to Google Places to put it on the map; that lookup runs on our servers.

6. Data retention

We retain information while your account is active and as reasonably necessary to provide the Service. After deletion, some records may be retained for security, fraud prevention, legal compliance, dispute resolution, backup integrity, or enforcement of our agreements. Retention periods depend on the record and purpose.

Specifically, account deletion keeps two kinds of record: anonymised engagement counts (the identifying link to you is removed at the moment of deletion), and moderation reports filed about you (the content snapshot is kept so we can keep the community safe; your identity is removed from it). Game-night chat messages are archived 7 days after the night.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security, and you are responsible for protecting your credentials and devices.

8. Your choices and rights

You can update profile information and permissions through the Service or your device. Depending on applicable law, you may have rights to access, correct, delete, or export information and to object to or restrict certain processing.

Requests may be sent to privacy@tabletop-together.com. We may need to verify your identity before completing a request.

9. Adult-only service

The Service is not available to anyone under 18. We do not offer a parental-consent process. If we learn that a minor has provided personal information or created an account, we may suspend the account and delete the information as required by law.

10. Cookies and similar technology

Our websites may use cookies or similar storage to maintain sessions, remember preferences, improve performance, analyze usage, and enhance security. Disabling them may prevent some browser features from working.

11. Third-party services

Third-party services integrated with Tabletop Together operate under their own privacy policies. Review those policies when using external authentication, mapping, notification, analytics, or linked services.

The providers we work with today are Google (sign-in, Maps, Places, Play age signals), Apple (sign-in, TestFlight, Declared Age Range), Microsoft (sign-in, email delivery), Firebase (push notifications), BoardGameGeek (game catalog and optional account link), and Anthropic (Tavern).

12. Changes to this policy

We may update this Privacy Policy as the Service or applicable requirements change. We will post the revised version with a new effective date and request a new acknowledgement when appropriate.

13. Contact

Privacy questions and requests may be sent to privacy@tabletop-together.com. General legal questions may be sent to legal@tabletop-together.com.