Privacy Policy
Last updated: 2026-04-01
1. Data Controller
BoardGameSet Kft.
Address: 3213 Atkár, Dózsa György út 39., Hungary
Company reg. no.: 10-09-039872 | VAT: HU32157235
Email: contact@meeplecup.com
Address: 3213 Atkár, Dózsa György út 39., Hungary
Company reg. no.: 10-09-039872 | VAT: HU32157235
Email: contact@meeplecup.com
2. Data We Collect
Registration: username, email address, password (hashed). Purpose: account management.
Profile (optional): city, country, bio, avatar. Purpose: public profile display.
League & match data: recorded results, scores, rankings. Purpose: core platform functionality.
Google sign-in: Google account name and email. Purpose: authentication.
Email notifications: emails sent per your notification preferences.
Profile (optional): city, country, bio, avatar. Purpose: public profile display.
League & match data: recorded results, scores, rankings. Purpose: core platform functionality.
Google sign-in: Google account name and email. Purpose: authentication.
Email notifications: emails sent per your notification preferences.
3. Legal Basis
Processing is based on GDPR Art. 6(1)(b) — performance of a contract — and consent for optional data such as profile information and email notifications.
4. Retention Period
Data is retained until account deletion. A 30-day cancellation window applies after a deletion request, after which data is permanently deleted. Data required by law is retained for the period prescribed by applicable regulations.
5. Processors & Third Parties
SiteGround Spain S.L. – hosting (EU servers)
Twilio SendGrid – transactional email
Google LLC – Analytics (anonymous stats), OAuth (optional login)
These act as data processors and may not use personal data for their own purposes. US-based transfers rely on the EU–US Data Privacy Framework (DPF).
Twilio SendGrid – transactional email
Google LLC – Analytics (anonymous stats), OAuth (optional login)
These act as data processors and may not use personal data for their own purposes. US-based transfers rely on the EU–US Data Privacy Framework (DPF).
6. Your Rights
Under GDPR you have the right to: access your data, rectify inaccurate data, erasure ("right to be forgotten"), data portability, and to object to processing.
Submit requests to contact@meeplecup.com. Response time: 30 days.
Submit requests to contact@meeplecup.com. Response time: 30 days.
7. Supervisory Authority
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): naih.hu
8. Data Security
Passwords are hashed using bcrypt. The platform is served over HTTPS. Regular backups are performed. Access is restricted to authorised personnel only.
9. Children
Meeple Cup is not directed at persons under 16. If you believe a minor has registered, please contact contact@meeplecup.com and we will delete the data immediately.