This privacy policy explains what personal information boardgamers.ca collects, why we collect it, how long we keep it, who we share it with and what rights you have. It is written to meet Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector (Law 25), the EU and UK General Data Protection Regulation (GDPR) and US state privacy laws.
In short: boardgamers.ca has no user accounts, comments, newsletter, advertising or analytics trackers. We do not set cookies of our own, we do not profile readers and we never sell or share personal information.
Last updated: October 15, 2026
1. Who is responsible for your information
boardgamers.ca (“we”, “us”) is an informational website about board game rules, strategy, genres and classics, available at https://boardgamers.ca. It is operated by:
SEO-Butler Limited
No. 6, Ir-Rampa
Ta’Xbiex XBX 1035
Malta
Company ID: C92153
Corp. reg. no.: MT26362716
SEO-Butler Limited is responsible for the personal information described in this policy (under the GDPR, it is the “controller”).
Person in charge of the protection of personal information (Privacy Officer): you can reach our Privacy Officer at [email protected] with any question, request or complaint about this policy or your personal information, or write to the postal address above.
2. What we collect, why, and on what legal basis
| Information | Why we use it | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| Server logs: IP address, browser and device type (user agent), page requested, referring page, date and time | To deliver pages, keep the site secure, block abuse and fix errors | Legitimate interest in running a secure website | 7 days on the web server; up to 30 days in backups, then deleted automatically |
Security data processed by Cloudflare: IP address and request details, and the __cf_bm cookie when needed | To protect the site against attacks and automated bots | Legitimate interest in security | The cookie expires after 30 minutes; Cloudflare’s own retention is set out in its policy |
| Emails you send us: your name, email address and message | To answer you and, where relevant, to correct or improve a guide | Your consent, given by writing to us, and our legitimate interest in replying | Up to 12 months after your last message, unless the law requires longer |
We only collect what is needed for these purposes and we do not use your information for any other purpose without asking you first. We do not use it to identify, locate or profile individual readers, and we make no decisions about you by automated means.
What we do not collect
- No user accounts, registration or logins for readers.
- No comments: commenting is switched off on the whole site.
- No newsletter or marketing email.
- No advertising, affiliate tracking, social media pixels or analytics scripts (such as Google Analytics).
- No sensitive information (such as health, financial or government ID data). Please do not send it to us.
3. Cookies and similar technologies
boardgamers.ca does not set any cookies of its own for visitors, and no technology on the site identifies, locates or profiles you. The only cookie a visitor may receive is a strictly necessary security cookie from Cloudflare:
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare | Tells people apart from automated bots to protect the site. Contains no information that identifies you. | 30 minutes |
cf_clearance | Cloudflare | Set only if you pass a security check, so you are not asked again. | Up to 30 minutes by default |
Because these cookies are strictly necessary for security, they do not require consent and we do not show a cookie banner. You can block or delete cookies in your browser settings; the site works without them, although you may then see a security check more often.
4. Who we share information with
We never sell, rent or trade personal information, and we do not share it for advertising. We use a small number of service providers who process information only on our instructions and under contracts that require them to protect it:
- OVHcloud hosts the website and its server logs on servers in Quebec, Canada.
- Cloudflare delivers our pages and protects the site. Every request passes through its global network. See the Cloudflare privacy policy.
- Google Workspace hosts the mailbox that receives emails sent to our addresses (forwarded by Cloudflare Email Routing). See the Google privacy policy.
- Backup storage in the Netherlands (European Union) holds copies of the website, sent over encrypted connections, for disaster recovery.
We may also disclose information if the law requires it, for example in response to a valid court order.
5. Transfers outside Canada and your region
The website itself is hosted in Canada. Cloudflare, Google and our backup provider may process information in other countries, including the United States and the European Union, where it may be accessible to courts and authorities under local law. Before transferring information we check that it will receive adequate protection. For transfers from the EU or UK, these providers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
6. How we protect your information
The site is served only over encrypted HTTPS. Administrative access is restricted to our team from approved networks, our software is kept up to date and backups travel only over encrypted connections to access-restricted storage. We keep the information we hold to a minimum, so there is little to expose. If a breach of security ever creates a real risk of significant harm to you, we will notify you and the relevant authorities as the law requires (in Canada, the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d’accès à l’information).
7. Your rights
Depending on where you live, you have the right to:
- Access the personal information we hold about you and learn how it is used and who it has been shared with.
- Correct information that is inaccurate or incomplete.
- Delete your information, or have it de-indexed where the law allows.
- Withdraw consent at any time, for example by asking us to delete an email you sent.
- Object to or restrict our use of your information based on legitimate interest (EU and UK).
- Receive your information in a structured, commonly used format (data portability).
- Know that we do not sell or share your information (US state laws such as the California Consumer Privacy Act). Because we never sell or share it, there is nothing to opt out of, and we treat Global Privacy Control signals as an opt-out anyway.
To use any of these rights, email [email protected]. We may ask you to confirm your identity before acting on a request. We answer within 30 days, free of charge, and we will never treat you differently for using your rights.
Complaints
If you are not satisfied with our answer, you can complain to a privacy authority:
- Canada: Office of the Privacy Commissioner of Canada
- Quebec: Commission d’accès à l’information du Québec
- European Union: the data protection authority in your country (list of EU authorities)
- United Kingdom: Information Commissioner’s Office
8. Children
Our guides are written for a general audience, including families, but the site is not directed at children and we do not knowingly collect personal information from children under 14. If you believe a child has sent us personal information, email [email protected] and we will delete it.
9. Links to other websites
Our guides link to publishers, rulebooks and other sources. Once you leave boardgamers.ca, the other site’s own privacy policy applies, and we are not responsible for how it handles your information.
10. Changes to this policy
If the way we handle information changes, for example if we add a contact form, analytics or a new service provider, we will update this page and the date at the top before the change takes effect. For how we research and write our guides, see our Editorial Policy and About pages.