Privacy Policy

1. Who we are

GMBoard is a toolset for tabletop RPG game masters. Questions about this policy or your data can be sent to support@gmboard.com.

2. Data we collect

• •
  Account data: your name, email address, and password (stored in hashed form).
• •
  Content data: the scenarios, NPCs, investigators, notes, audio selections, and other materials you create or upload while using the Service.
• •
  Payment data: when you purchase a subscription, payment is processed by our payment provider and Merchant of Record (Paddle or Creem). We do not receive or store your full card details. We receive only limited transaction data such as your billing country, the plan purchased, and the transaction status.
• •
  Usage and technical data: IP address, browser type, device information, pages visited, and actions taken in the Service, collected to operate and improve the product.
• •
  Cookies and similar technologies: see Section 7.

3. How we use your data

We use your data to:

• • create and manage your account and provide the Service;
• • process subscriptions and grant access to paid tiers;
• • provide customer support and respond to your requests;
• • maintain security, prevent fraud, and ensure service stability;
• • improve and develop features;
• • comply with legal and tax obligations.

4. Legal bases for processing

We rely on: performance of a contract (to provide the Service), your consent (e.g. non-essential cookies, marketing emails), our legitimate interests (security, product improvement), and compliance with legal obligations.

5. Sharing your data

We share data only with:

• •
  Payment provider / Merchant of Record (Paddle or Creem): to process payments, taxes, refunds, and chargebacks.
• •
  Infrastructure and service providers: hosting, storage, analytics, and email delivery, acting on our instructions.
• •
  Authorities: where required by law.

We do not sell your personal data.

6. International transfers

Some providers may process data outside your country or the EU/EEA. Where this happens, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Cookies

We use essential cookies required for the Service to function (e.g. login sessions). With your consent, we may use analytics cookies to understand usage. You can withdraw consent or manage preferences in your browser at any time.

8. Data retention

We retain account and content data while your account is active. After account deletion, we remove or anonymize personal data within a reasonable period, except where longer retention is required by law (e.g. accounting and tax records).

9. Your rights

Subject to applicable law, you may request to access, correct, delete, or export your data, restrict or object to processing, and withdraw consent. To exercise these rights, contact support@gmboard.com. You also have the right to lodge a complaint with your local data protection authority.

10. Security

We apply reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, but we work to safeguard your information.

11. Children

The Service is not directed to children under 16. We do not knowingly collect data from children under 16.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date reflects the latest version. Material changes will be communicated where required.

13. Contact

For any questions about this Privacy Policy or your data, contact us at support@gmboard.com.