Privacy Policy
Last updated: 25 October 2026
FyXe is an app for logging board game sessions and sharing them with friends. This policy explains what personal data we process, why, and what you can do about it.
Who is responsible
Richard van den Bogaard, the Netherlands, is the controller for this processing. Contact: privacy@fyxe.app.
What we process, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address | Signing in — we use a one-time code, there are no passwords | Performance of a contract |
| Profile: username, display name, bio, avatar, preferences | So other people can recognise you | Performance of a contract |
| App language | So your sign-in email is in your language | Performance of a contract |
| Player register: names of the people you play with, after a BGG import also their BGG name and BGG number | Recording who took part in a session — see the section below | Legitimate interest |
| Sessions: date, duration, notes, location name, scores, winner, and after a BGG import the colour and rating from BGG per player | The core purpose of the app | Performance of a contract |
| Photos of a play, and your profile photo | Recording what an evening looked like — see the section below | Performance of a contract |
| Follows, reactions, comments, collection | The social side of the app | Performance of a contract |
| Origin: who invited you, through what kind of link (an invite or a shared play, profile, badge or statistic) and the waitlist campaign code | Seeing how people find FyXe | Legitimate interest |
| App version and platform, and when you last opened the app | Knowing when an old version can be retired, and how many people use the app | Legitimate interest |
| Feedback you send through the app, with the app version | Improving the app | Legitimate interest |
| Reports you make, and who you block | Dealing with abuse | Legitimate interest |
| A log of what an admin does, such as handling a report or suspending an account | Being able to account for what happened | Legitimate interest |
| Searches that returned no results | Finding gaps in the game catalogue. Stored without any user identifier | Legitimate interest |
| IP address, timestamp, device type in security logs | Detecting abuse and keeping accounts safe. Supabase keeps these logs for one day | Legitimate interest |
| Error reports: what went wrong, app version, device model and operating system, and your account ID. Without your name, e-mail address or what you type | Finding and fixing errors and crashes. Sentry keeps them for 30 days | Legitimate interest |
We do not collect your device location, we do not use advertising or analytics trackers, and we do not process payment details. How many people use the app, and which version, we count ourselves in our own database.
People who don't use FyXe
When you log a game night, you record who played. Those people are often not FyXe users — they are simply a name in your personal player register.
We keep this to a minimum: a name. If you import your plays from BoardGameGeek, the BGG name and BGG number that BGG has for that player are added, plus the colour and rating from BGG per play. No contact details, no date of birth. If your profile is public, that name is visible to the people who can see that session, in the same way a photo caption names the people in it.
Only enter names of people who don't mind. If a child plays along, stick to a first name or nickname. If you or your child are named in FyXe and you would rather not be, email privacy@fyxe.app and we will remove or anonymise the entry. You don't need an account to make that request.
Photos
You can add photos to a play and set a profile photo. Two things you should know about that.
Every photo is checked before anyone else can see it. That is done by an automated service, Sightengine, which only looks at whether the image contains unwanted material. We send nothing but the image itself: no email address, no username, no name of the play. Sightengine therefore cannot link a photo to you. That check may take place outside the European Economic Area — in Canada or the United States — on the basis of the European Commission's standard contractual clauses. While the check is running, the photo is visible to you only.
A photo of a game night often has other people in it. The same applies as for names above: only upload photos that the people in them do not object to. Are you in a photo on FyXe and would you rather not be? Email privacy@fyxe.app, also if you do not have an account yourself.
Before a photo leaves your device it is resized and saved again. That removes the hidden information a camera adds — such as the location where the photo was taken. It never reaches us. Photos are not stored at a public address either: they can only be retrieved by people who are allowed to see the play they belong to.
Sharing
If you share a play or profile as a link, anyone with that link sees a card on fyxe.app. For a play: the game, the date and the number of players, without names. For a profile: your display name, username and number of plays. This only works for a public profile. Every share link carries your invite code, so we can see who brought someone in. If you install FyXe from such a link or an invitation through Google Play, Google Play passes the code on to the app.
The waitlist
Until FyXe is in the app stores, you can sign up on fyxe.app to hear when it is. For that we store your email address, the language of the page, your platform (Android, iPhone or other, read from your browser), the campaign code in the link you came from (for example a QR code on a shirt), whether you would like to test FyXe before launch, and when you signed up and confirmed.
We only put you on the list after you confirm by tapping the button in the email we send you. Then we email you once, when FyXe is live. If you said you want to test, we may also send you a link to install a test version. Nothing else, and never on behalf of anyone else.
To stop automated signups we use Cloudflare Turnstile, which checks in the background that you are not a bot, and we limit the number of signups per network. For that limit your IP address is stored only in coded form, for at most one hour, and never together with your signup.
How long: a signup that is not confirmed is anonymised after 30 days. A confirmed signup is anonymised six months after the launch email. If you create a FyXe account with the same email address before then, your signup is anonymised straight away and the campaign code moves to your profile. Anonymised means: your email address and the confirmation link are deleted, and the times are reduced to dates. What remains are counts we cannot trace back to you — per campaign code, language and platform. Want to be removed sooner? Email privacy@fyxe.app.
Who else sees your data
We use a small number of providers, each acting on our instructions only:
- Supabase — database and authentication. Data is stored in the EU (Ireland).
- Resend — sending your sign-in emails, the waitlist emails, and an email if your account is suspended.
- Cloudflare — hosting this website and the bot check (Turnstile) on the waitlist form.
- Expo — app updates. When the app starts it checks for a new version. That sends your IP address and a random installation ID, not your account.
- Sightengine — checking photos for unwanted material. See the section above; the check may take place outside the EEA.
- Sentry — error reports from the app and the server. Storage is in the EU (Frankfurt).
The game catalogue comes from BoardGameGeek. If you import your plays from BGG, our server requests them there with your BGG username, and we fetch the BGG names of your players. The app loads game images directly from BoardGameGeek, so BGG sees your device's IP address.
We do not sell your data, and we never will.
How long we keep it
Your game history is meant to last — that is the point of the app — so we keep it until you delete it or delete your account. Searches without results are deleted after 90 days. Sign-in codes are short-lived. Photos stay until you delete them; deleting a play also deletes the photos attached to it.
When you delete your account, your profile, sessions, photos, collection, follows, reactions, reports and your own player register are removed. What stays:
- A play of yours in which someone else accepted their participation goes to that person. Your name stays in it as a player, no longer linked to any account. The same goes for your name and score in other people's plays, and for an entry in someone else's register. Otherwise their game history would lose a participant. Email us if you want that removed as well.
- Feedback you sent, no longer linked to your account.
- Reports others made about you, and the log of what an admin did. We keep those until two years after they were handled, then they are deleted automatically.
Your rights
You can access, correct, export, delete, restrict, or object to the processing of your data. Two of these are built into the app, under Settings:
- Export my data — a JSON file with everything we hold about you: account and profile, plays, players, collection, follows, reactions, badges, feedback, reports, blocks and app versions. Photos and your profile photo are in it as download links that work for seven days.
- Delete account — see Deleting your account.
For anything else, email privacy@fyxe.app. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Deleting your account
In the app: Settings, Delete account. That is immediate and permanent.
Without the app: email support@fyxe.app. We reply to the email address of the account, not to the sender, and ask you to confirm. After you confirm, we delete the account within 30 days.
What stays, and for how long, is under How long we keep it.
Deleting data but keeping your account
In the app you can delete plays (with their photos), photos, comments, your profile photo and display name, players from your register, locations, games from your collection, and an import from BoardGameGeek. For other data, email support@fyxe.app, and we confirm with the account's email address in the same way.
Age
You need to be at least 16 to use FyXe. We don't ask for your date of birth, because storing one would mean processing more data than we need.
Security
Every table in our database enforces row-level access rules, so one account cannot read another's data. Traffic is encrypted, and there are no passwords to leak — signing in uses a one-time code by email. No system is perfect; if we discover a breach that puts you at risk, we will tell you.
Changes
If this policy changes in a way that matters, we will say so in the app. The date at the top always reflects the current version.