Last updated 9 September 2026
Privacy Policy
How Bord Bank handles information about bankers, players and games.
Who runs this service
Bord Bank is operated by Bord Bank, referred to as "we" and "us" below. Questions about this policy go to hello@example.com.
What the service is
Bord Bank keeps track of play money during in-person board games. It never holds, moves or represents real currency, and it is not a payment or financial service. Everything described below exists only to run a game table.
Information about bankers
A banker is someone with a login who creates and runs tables. Banker accounts are created by invitation only. For each banker we store:
- A display name and email address.
- A password, stored only as a salted hash. We never see or store the password itself.
- Whether and when the email address was verified.
- If two-factor authentication is enabled, the authenticator secret and recovery codes, stored encrypted.
- If passkeys are registered, the public key and a name for each passkey. The private key never leaves the banker's device.
- Login sessions and, if chosen, a "remember me" token.
Information about players
Players do not create accounts and never give us an email address or phone number. When a banker adds a seat, we store the display name and colour the banker chose. Each seat receives a numeric PIN that we store only as a salted hash. When a player joins from a device we store a random device token, again only as a hash, together with when it expires, when it was last used and when it was revoked.
The banker enters player names. Bankers are asked to use only the name a player is happy to see on other players' screens at the same table.
Game records
Each table records its name, currency settings, join code, rules, every payment with its amount, optional note and timestamp, which banker or seat initiated it, and status changes such as starting, completing, reopening and archiving. These records form an append-only ledger. Mistakes are corrected by posting a reversal rather than by editing or deleting history, and notes are visible to the banker and to the players on both sides of a payment. Please keep notes to the game.
Technical information
- Addresses. We use the network address of each request to limit join, PIN, login and password reset attempts. These counters are kept for one minute. Standard web server access logs record the address, requested page and browser identification and are kept for a limited period for security and troubleshooting.
- Cookies. Bankers receive an encrypted session cookie and a cross-site request forgery token, plus a "remember me" cookie if requested. Players receive one cookie holding their device token, valid for twelve hours. These cookies are essential to the service and are not used for advertising or tracking.
- Browser storage. Your light or dark appearance preference is kept in your browser's local storage and never sent to us.
- Live updates. Open tables hold a websocket connection so balances refresh promptly. The messages carry only a signal to refresh. No balances, names or notes are sent over that channel.
We send email only to bankers: an invitation with a password setup link, email verification, password reset links and security notices. Email is delivered through a mail provider that processes the recipient address and message on our behalf.
Who else sees the data
Data is stored with our hosting provider and email is sent through our mail provider, each acting on our instructions. We do not use analytics services, advertising networks or third-party trackers, and we do not sell or rent any information. We disclose information only when the law requires it or to protect the service and its users from abuse.
How long we keep it
- Game records, player names and the ledger are retained for as long as the banker's account exists, because the ledger is designed never to lose history.
- Player device tokens expire after twelve hours and are revoked when a banker resets a PIN, signs out a player's devices or deactivates a seat. Expired records are retained in this version of the service and hold only hashed values.
- Rate limiting counters last one minute. Server logs are rotated on a short schedule.
- Banker accounts are deleted on request from the profile page. An account that still owns tables cannot be deleted from the profile page, because the tables' history depends on it. Contact us and we will remove the tables or replace the personal details with anonymous values so the account can be closed.
Your choices and rights
- Bankers can view and change their name and email on the profile page, change their password, and enable or disable two-factor authentication and passkeys on the security page.
- Players can leave a table from their own device at any time. A player who wants their name changed or their seat removed should ask the banker, who can rename the seat or deactivate it. Ask us if you need a name replaced in past game records.
- Depending on where you live you may have rights to access, correct, delete or export your information, or to object to how it is used. Write to hello@example.com and we will respond within a reasonable time.
Security
Connections use HTTPS. Passwords, PINs and device tokens are stored only as hashes. Ledger records cannot be edited or deleted, even by the application. Repeated failed attempts are rate limited per address and per seat. No system is perfectly secure, so please keep PINs and passwords private and tell us if you notice anything wrong.
Children
Players do not create accounts and give us no contact details, so children can hold a seat at a table run by an adult banker. Banker accounts are intended for adults. We do not knowingly collect personal information from children beyond a display name chosen by the banker.
Changes
If this policy changes we will update the date at the top of this page. Significant changes will also be announced to bankers by email.
Contact
Bord Bank · hello@example.com
See also the Terms of Service.