Privacy

Your account. The email address you signed up with and a hashed password, held by Supabase, which runs the sign-in. A display name if you set one.

Your shelf. The games you add, with their status (owned, for sale, wishlisted, watching, sold), what you paid and when, condition, notes, an asking price, a target price, the edition, and the facts about each game that come from BoardGameGeek.

Your plays. When you logged a play, how long it took, what you thought of it, and the names you typed as participants. Plays are private: they appear in no friend view, no shared link, and no sync. Participant names are free text you wrote and are never matched to other accounts.

Your photos. Photos you take of your own copies, stored in a private bucket that only your account can read. A photo you send to the box-reading or shelf-reading features is sent once to the model that reads it (see below) and is not kept there.

Your settings. Currency, sort preference, your BGG username, whether you want match emails, and a share link if you made one.

Feedback. Anything you send through the feedback button, with the screen you sent it from.

Friends are people you connected with by exchanging a code. A friend sees your display name and a projection of your shelf: games that are owned, for sale or wishlisted, with their asking prices; which of those you want to play; and, per game, whether you have played it. A friend never sees your plays, what you paid, your notes, your photos, or games you are only watching.

A share link, if you create one, shows anyone who has it a read-only shelf: covers, names, statuses and asking prices on games for sale. Never what you paid, never notes. A ranking you share shows names and covers in your order, and only for games that are owned, for sale or wishlisted. Turning sharing off kills the link.

Game facts come from BGG's API. If you import or sync your collection, GameChest reads your public BGG collection and, if you ask it to, your plays.

Writing to your BGG collection needs your BGG password. It is used once, in memory, to sign in as you, and is never stored or logged. If you choose to keep the sign-in, GameChest stores the session cookies BGG issued, encrypted, for about a month; you can forget them at any time in Settings. More on what we take from BGG and what we send back.

Connecting eBay is optional and only for listing games you are selling. When you connect, eBay gives GameChest a token that lets it create and manage listings on your behalf and read your orders. GameChest stores that token encrypted, together with your eBay user id and username, and the ids of the selling policies and location it set up for you. It never sees your eBay password.

GameChest reads your recent orders only to notice when a game it listed for you has sold, and records the sale date and price against that game. It does not store buyer details.

Disconnecting eBay in the app deletes the token immediately. If you close or delete your eBay account, eBay tells GameChest and the stored connection is deleted then too.

Supabase hosts the database, sign-in and photo storage, in the EU (Ireland). Vercel hosts the app and keeps short-lived server logs. BoardGameGeek receives the searches and collection reads described above. eBay receives the listings you publish and the order reads described above.

Anthropic runs the model behind the curator's brief, “Ask the shelf”, the warmer listing draft, and photo reading. What is sent is the minimum for the job: game names, statuses, BGG facts, play counts and dates, and for photo features the photo itself. Never what you paid, never your notes, never who you played with, never your email. These calls happen only when you tap the button that asks for them.

Resend delivers the one kind of email GameChest sends: a friend listing something on your wishlist, or wanting something you are selling. It gets your email address and the game names. Turn it off in Settings.

There is no analytics script, no advertising, and no data broker. Nothing is sold.

A sign-in cookie from Supabase keeps you signed in. A short-lived cookie protects the eBay connect flow against forgery. The browser's own storage remembers small conveniences such as the last shelf view. That is all.

Take your data. Settings offers the shelf as a CSV download at any time.

Turn things off. Stop sharing, disconnect eBay, forget the kept BGG sign-in, and switch off match emails, each from Settings, each taking effect at once.

Delete your account. There is no self-serve button yet. Send a message through the feedback button, or email the address below, and the account with everything under it (shelf, plays, photos, connections) is deleted, usually within a few days.

When this page changes, the date at the top changes with it. Questions go through the feedback button in the app, or to [email protected].