Privacy
We keep only what is needed for you to play, and we never sell or share your data.
Who is responsible?
Spelbordet is run by Johan Selin in Sweden, who is the data controller. Contact: hej@spelbordet.app.
What we keep
| What | Why |
|---|---|
| User name, password (only as a hash, never in plain text), e-mail, profile picture | Your account and logging in |
| Date of birth | Showing the right games for your age: child account under 13, youth account 13–17, adult account from 18 |
| Phone number (optional, adults) | Reaching you if something happens to your account, and what you have turned on yourself |
| Your consents: what you said yes or no to, and when | Only sending what you have asked for |
| Results, levels, ranking, chips and challenges | The games, top lists and statistics |
| Friends, chat and invitations | Playing with others |
| Who you have blocked, and reports: who reported, who it was about, why, and a copy of the messages around the reported one | Keeping the chat friendly |
| What you write in the wiki | The wiki shows who wrote what |
| Feedback and bug reports, with the page you were on and your browser type | Finding and fixing bugs |
| E-mail and name on the waiting list, and your answers if you fill in the optional questions (what you like to play, how you found us, whether you want to test) | Sending you an invitation to the beta and knowing which games to build |
| The address for notices, only if you turn them on | Telling you when it is your turn |
| Puzzles you solve as a guest (without an account): game, level, time and day | So they come along to your account when you log in or make one |
| Your pet in the nest: kind, food, visits, diary and postcards | The nest |
| Feathers (adults only): receipts for what you earn, lock and pay. Only you see your receipts in the explorer. Others see only the site's totals, and that someone got a share of a block, never who | Feathers and the explorer |
| How many questions you asked Tita and what they cost, not what you wrote | Keeping the cap of 30 answers a day |
Your IP address is used for a moment to stop too many login attempts, but is not stored in the database.
We also count visits ourselves, without cookies and without any outside service: which page was shown, where the visitor came from (for example a search engine), the kind of device and the language, and what kind of visitor it was (no account, a guest who has played, player, tester or staff, so we can leave out our own visits). No IP address and no user id is stored. To count a day's visitors, a code is made from the IP address and browser type together with a random number that changes every day and is then deleted, so the code cannot be linked to you. The rows are deleted after 90 days.
The web server keeps ordinary technical logs for running the site and for security.
Cookies
The site uses two cookies. One keeps you logged in (for 60 days, or until you log out). The other is only given to someone playing as a guest, without an account, when a puzzle is sent in: a random code that lets the puzzles you solve come along when you log in or make an account in the same browser. It is removed once that has happened, and otherwise after 30 days. Both are needed for the site to work as you expect, so no cookie banner is needed. Your settings, such as language and theme, are kept in your own browser. There are no tracking cookies and no ads.
Where the data is
On our server at Oderland in Sweden, inside the EU. E-mail is sent from our own domain through the same host. We never sell or hand over data to anyone else, unless the law requires it.
Tita the great tit (a test for a few players so far) writes with the help of the AI Claude from Anthropic. When you ask her about a game's rules, your question, the earlier questions and answers in the same talk, the game's rule pages from the wiki, the game's name and the language are sent. What you write is sent as it is, so do not write anything you do not want to share. Tita also writes the match report on the end card (only what the end card shows, with "you" and "player 2" instead of names), and the diary and postcards in the nest (only facts about the pet). Your name, your friends' names and your account are never sent. Anthropic does not use what is sent to train its AI models and deletes it after 30 days at most. We only keep that a question was asked and what it cost, not what you wrote.
If you want to give a voluntary gift, that happens on Ko-fi (ko-fi.com), which takes the payment. Ko-fi's own terms apply, and we only see what Ko-fi shows us, such as the name you give, the amount and a message. A gift gives no coins, no XP and no advantage in the games.
For how long
Your account and what belongs to it are kept until you ask us to delete them. When we delete an account, the login, contact details, consents, friends, chat, settings, the nest, notice addresses, feedback and your results and levels go. A few things stay without pointing to you: in other players' results and tournaments your old name stays as an ordinary line, the admin log keeps that the account was removed with the e-mail address masked, and the receipts in the feather chain stay under an account number and an address, because the chain must not be changed afterwards. Feathers that were on the account go back to the mine. Puzzles solved as a guest are kept for 30 days unless they move to an account. The waiting list is kept until you ask to be removed or we clear out old lines, also after you have had an invitation, so we know who is already invited. If your account is deleted, your line on the waiting list goes too. Visit statistics are deleted after 90 days.
Legal basis
The account and the games: the agreement with you when you create an account. Security, bug reports and visit statistics: our legitimate interest in a safe site that works and gets better. The waiting list, notices, news by e-mail and text messages: your consent, which you can withdraw at any time under Settings → Contact and consents.
Your rights
You have the right to a copy of your data, to have mistakes corrected, to have it deleted and to object to how we use it. E-mail hej@spelbordet.app from the address you used and we answer within 30 days. For a child account, the parent e-mails from their own address. If you are not happy, you can turn to the Swedish Authority for Privacy Protection (imy.se).
Children
If you are under 13, a parent makes a child account for you from their own account. A child account has only a user name, a password and a date of birth, never an e-mail or phone. Nobody can send a child a friend request: the parent picks the child's friends among their own. A child account only sees games that suit children, no casino, and gets no feathers.
Changes
If this page changes, the site's news will say so. Last changed 2 November 2026.