Privacy Policy

Last updated: March 31, 2026

1. Introduction

This privacy policy describes how Unboared ("we", "our") collects, uses and protects personal data when you use our platform.

We are committed to protecting the privacy of our users and their customers in accordance with the General Data Protection Regulation (GDPR).

2. Data controllers

Unboared and the partner venue act as joint data controllers for player data. Unboared provides the technical platform; the venue decides whether to enable data collection.

Unboared — 9 rue Dareau, 75014 Paris, France
Email: contact@unboared.com

3. Data collected

For venues (subscribers):

  • First name, last name, professional email address
  • Venue name
  • Billing information (managed by Stripe)
  • Usage data (sessions, games played, statistics)

For players:

  • Chosen username and avatar
  • Scores and game history
  • If enabled by the venue: email address, first name, last name, phone number, age
  • Technical data: browser type, device type

4. Purposes of processing

  • Providing and improving the Service
  • Managing subscriptions and billing
  • Usage statistics for venues
  • Email communications (only with explicit consent)
  • Managing leaderboards and rewards

5. Legal basis

  • Contract performance: providing the Service to subscribers
  • Legitimate interest: improving the Service, anonymised statistics
  • Consent: collecting player emails, marketing communications

6. Retention periods

  • Account data: 3 years after last activity
  • Billing data: 10 years (legal obligation)
  • Player data: 12 months after last gaming session
  • Technical logs: 12 months

7. Data sharing

We never sell personal data. Data may be shared with:

  • Stripe: payment processing
  • Firebase (Google): hosting and authentication
  • The partner venue: player data collected on their premises

8. International transfers

Some data may be processed outside the European Economic Area (notably via Firebase/Google). These transfers are governed by the European Commission's Standard Contractual Clauses.

9. Security

We implement appropriate technical and organisational measures to protect personal data: encrypted communications (HTTPS), secure authentication, restricted data access.

10. Your rights

Under the GDPR, you have the following rights:

  • Right of access to your personal data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to object to processing
  • Right to restriction of processing
  • Right to withdraw consent at any time

To exercise these rights, contact us at: contact@unboared.com

You also have the right to lodge a complaint with your local data protection authority (in the UK: the ICO — Information Commissioner's Office).

11. Cookies

Our platform uses technical cookies necessary for the Service to function (player identification, game session). These cookies are strictly necessary and do not require consent.

We also use Firebase Analytics to measure Service usage. You can disable this collection via your browser settings.

12. Changes to this policy

We may update this privacy policy. Significant changes will be communicated by email at least 30 days before they take effect.

13. Contact

For any questions about this policy, contact us at: contact@unboared.com