Privacy Policy

Last updated: February 2025

1. Who we are

So Bored Games ("we", "our") operates the So Bored Games service at https://sobored.games. We are the data controller for the personal data we collect through the Service.

2. What data we collect

We collect: (a) Account data: email, name (if provided), and password (stored in hashed form) when you register; (b) Usage data: how you use the app (e.g., games created, rooms joined), which we may use in anonymised or aggregated form; (c) On web only: we may use cookies and similar technologies for security (e.g., anti-abuse) and, with your consent, for analytics (see Cookie consent below). Guest players may provide a display name when joining a room; that is stored in association with the game session.

3. Why we use your data (purposes and legal basis)

We use your data to: provide and operate the Service; create and manage your account; run games and multiplayer features; communicate with you about your account or the Service; improve the Service and fix issues; and comply with legal obligations. For users in the EEA and UK: we process your data on the basis of (i) contract (performance of our agreement to provide the Service), (ii) consent where we ask for it (e.g., analytics, optional marketing), and (iii) legitimate interests (e.g., security, analytics in anonymised form) where applicable. You can withdraw consent at any time; withdrawal does not affect the lawfulness of processing before withdrawal.

4. Retention

We keep your account data for as long as your account is active. If you delete your account or request erasure, we will delete or anonymise your personal data within a reasonable period, except where we must retain it for legal reasons. Session and game data may be retained for a limited period for operational or legal purposes.

5. Sharing and international transfer

We do not sell your personal data. We may share data with service providers (e.g., hosting, analytics) who act on our instructions. If we transfer data outside the EEA/UK, we ensure appropriate safeguards (e.g., adequacy decisions or standard contractual clauses) are in place where required by law.

6. Cookies and analytics (web)

On the website we may use: (a) Strictly necessary cookies (e.g., for security and basic operation), which do not require consent; (b) Analytics cookies (e.g., Google Analytics), which we use only with your consent. You can accept or decline non-essential cookies when prompted. Refusing analytics does not affect your use of the Service.

7. Your rights (especially EEA/UK)

You have the right to: access your personal data; request correction of inaccurate data; request erasure ("right to be forgotten"); request restriction of processing; object to processing; data portability (where applicable); and withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with a supervisory authority in your country (e.g., in the UK, the ICO; in the EU, your local data protection authority).

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No system is completely secure; we encourage you to use a strong password and keep it confidential.

9. Changes

We may update this Privacy Policy from time to time. We will post the updated version and, for material changes, we may notify you. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For any request regarding your personal data or this Privacy Policy, please contact us at https://sobored.games or through the contact information provided in the app. We will respond within the timeframes required by applicable law (e.g., one month under GDPR).