Privatezza

Backgammon Circle

Privacy Policy

Last updated: August 24, 2026

This translation is provided for convenience. In the event of any discrepancy, the French version prevails.

1. Introduction

This privacy policy describes how Backgammon Circle (hereinafter "we", "our" or "the Platform"), available at backgammoncircle.com, collects, uses and protects your personal data in accordance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and the French Data Protection Act.

It informs users about the personal data processing carried out in connection with access to the Platform (website and mobile application), account creation, use of the game and community features and, more generally, the management of the relationship with users.

For any specific information relating to cookies and other trackers, please consult the cookie policy available on the Platform.

2. Data Controller

The controller of personal data processing is:

Note: This information will be completed upon the company's registration (SIRET number, trade register, share capital).

For any question relating to personal data protection or to exercise your rights, you can contact us at the dedicated address privacy@backgammoncircle.com (see also the "Contact us" section at the end of this document).

3. Personal Data Collected

3.1 — Data Provided by the User

When you create your account and use the Platform, we collect the following data:

Additional data may also be collected when you contact us, when you submit a support request via the Support and Suggestions channels, when you report content or behavior, or when you take part in community features available on the Platform.

Sign in with Google: if you choose to sign in with your Google account, we receive from Google your email address and an account identifier, used solely to create or link your Backgammon Circle account.

Inviting a third party: when you invite a non-registered person by entering their email address, that address is used solely to send the invitation, at your initiative, and is neither kept for other purposes nor reused for marketing.

3.2 — Automatically Collected Data

When you browse the Platform, certain data is collected automatically:

• Technical and connection data: technical logs, IP address, information about the browser, device and operating system, connection dates and times, and the technical events necessary for the security, proper functioning and administration of the Platform (including rate limiting and abuse prevention).
• Push notifications: if you enable them, the subscription identifier provided by your browser or device, used solely to send you the notifications you requested.

Information about the cookies and other trackers stored or read on your device is described in the Platform's cookie policy.

3.3 — Game Data

When you use the Platform to play, we record:

• Your game history (results, moves played, dates)
• Your game statistics (win rate, Elo rating, performance indicators from game analysis)
• Your progress in puzzles, the arena, mistake review and lessons, as well as your play streak
• Your participation in competitions, leagues and club events

3.4 — Community and Moderation Data

Depending on the features you use, we also process:

• Your friendships, challenges sent and received, and blocked users
• Your club memberships and your role within them
• The professional players you follow in the news section
• Your account's moderation history (reports, warnings, sanctions), for security and abuse prevention purposes
• Proof of your consents (acceptance of the ToU, newsletter choice, cookie choices)

4. Purposes and Legal Bases of Processing

Each data processing operation relies on a legal basis compliant with the GDPR:

Where several bases may apply to the same category of operations, the relevant basis depends on the concrete purpose of the processing concerned.

5. Data Retention Periods

Your data is retained for periods proportionate to the purposes for which it is processed and, where applicable, in compliance with applicable legal obligations:

Certain data may be kept beyond the periods indicated above as intermediate archives where necessary to comply with a legal obligation, respond to a request from a competent authority, defend the publisher's rights or manage a dispute.

6. Recipients and Processors

Your personal data may be shared with the following processors, strictly within the scope of providing the service:

We never sell your personal data to third parties. No data is shared for third-party advertising purposes.

Personal data may also be shared, to the strict extent necessary, with authorized persons within the publisher's organization, its technical service providers, its advisors, the providers in charge of maintenance, hosting, support, email sending, security or abuse prevention, and with administrative or judicial authorities where required or permitted by law.

7. Data Transfers Outside the European Union

Some of our processors are located in the United States. Where they are certified under the EU-US Data Privacy Framework (DPF), adopted by the European Commission on July 10, 2023, these transfers benefit from an adequacy decision guaranteeing an adequate level of protection.

Where data is transferred to a provider located outside the European Economic Area that does not benefit from an adequacy decision, the publisher ensures that appropriate safeguards are in place in accordance with applicable regulations, such as standard contractual clauses approved by the European Commission, supplemented where necessary by appropriate additional measures.

You can obtain more information about data transfers outside the EEA and the applicable safeguards by making a request using the contact details in the "Contact us" section.

8. Data Security

We implement the following technical and organizational security measures to protect your data:

• Encrypted communications via HTTPS (TLS);
• Password hashing with a robust algorithm (bcrypt);
• Restricted database access (key-based authentication);
• Regular database backups;
• Rate limiting and abuse protection on sensitive endpoints;
• Regular updates of software dependencies.

These measures are intended to preserve the confidentiality, integrity, availability and resilience of the systems and data. They may evolve to take into account the state of the art, identified risks and the operational constraints of the Platform.

9. Your Rights

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access (art. 15): obtain a copy of all personal data we hold about you.
• Right to rectification (art. 16): request the correction of inaccurate or incomplete data.
• Right to erasure (art. 17): request the deletion of your personal data and your account.
• Right to portability (art. 20): receive your data in a structured, commonly used and machine-readable format (JSON).
• Right to object (art. 21): object to certain processing of your data, in particular for marketing purposes.
• Right to restriction (art. 18): request the suspension of the processing of your data in certain circumstances.

You also have the right to define directives regarding the fate of your personal data after your death, under the conditions provided for by applicable French regulations.

To exercise your rights, contact us at: privacy@backgammoncircle.com. We undertake to respond to any request within a maximum of one month, in accordance with Article 12 of the GDPR.

You also have a "Delete my account" button accessible directly from your profile settings, which results in the permanent deletion of all your data within 30 days, and an unsubscribe option for news emails in your settings.

Before responding to certain requests, the publisher may need to verify the identity of the requester where necessary to secure the handling of the request.

10. Cookies

Information about the cookies and other trackers used by the Platform (list, purposes, durations, consent regime) is presented in the cookie policy, accessible at any time from the Platform. You can change your choices at any time via the "Cookie settings" link in the footer.

11. Protection of Minors

The Platform is not intended for minors and the publisher does not knowingly wish to collect personal data concerning minors in connection with the creation of a user account. In accordance with the ToU, registration is reserved for persons aged 18 or over.

If the publisher learns that an account has been created by a minor in breach of the ToU, it reserves the right to suspend or delete that account and erase the data concerned, subject to applicable legal retention obligations.

12. Changes to This Policy

We reserve the right to modify this privacy policy. Any substantial change will be notified by email to users with an account and will be clearly indicated on the Platform. The date of the last update is shown at the top of this document.

The applicable version is the one in force on the date the Platform is used or, for users with an account, the one brought to their attention as described above.

13. Complaint to the CNIL

If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the French Data Protection Authority (CNIL):

14. Contact Us

For any question relating to this privacy policy or any request relating to your personal data, you can contact us:

You can also contact us for more information about the categories of data processed, the recipients, the retention periods and the safeguards implemented in the event of transfers outside the European Economic Area.