Privacy Policy
Last updated: 1 November 2026
Gameboardly is a free classroom board maker. It is built so a class can play without anyone creating an account — which also means there is very little to collect in the first place. This page describes what is stored, where it goes, and how to get it removed.
1. Who we are
Gameboardly (“we”, “us”) operates this website. For any privacy question or request, email hi@gameboardly.com. We answer within 30 days.
2. What we collect
| Data | Why | Retention |
|---|---|---|
| Topic text + grade band | Sent to an AI provider to write the questions. We do not use it to train models. | Not stored after generation |
| Room code + first names | Only if a class uses the optional phone buzzer. A first name is what shows on the scoreboard. | Server memory only — gone when the room closes or the server restarts |
| IP address | Rate limiting, so one connection cannot drain the generation budget. | In memory per hourly window; server logs up to 30 days |
| No accounts | There are no sign-ups, so there are no profiles, passwords or email addresses. | — |
3. What we do not do
- — We do not ask students for an email, a password, a birth date or a real name.
- — We do not run advertising or cross-site tracking scripts on the game screens.
- — We do not sell or rent personal data. There is no data business here.
- — We do not use classroom content to train models.
4. Children and classrooms
The product is used by teachers, and in its default mode students never touch a device: the board goes on the projector and the teacher taps who answered. When a class does use phones, the only field a student fills in is a first name — teachers can ask students to type an initial or a nickname instead, and nothing else is requested or recorded.
For US schools, this design is intended to avoid collecting personal information from children under COPPA. For EU/UK schools, we rely on the teacher’s legitimate interest in running a lesson, and no student profile is created.
5. Who else touches the data
- — AI provider (DeepSeek): receives the topic text and grade band to write the questions. Nothing else about the class is sent.
- — Hosting provider (Hong Kong): runs the server that holds rooms in memory.
- — Cloudflare: DNS resolution only. The record is unproxied (DNS only), so requests are not routed through Cloudflare’s edge.
- — Let’s Encrypt: issues the TLS certificate. No content is shared.
- — Payment provider (Stripe): only if you buy a paid plan. Card details are entered on Stripe’s hosted checkout, not on this site; we receive a customer id, your email and whether the payment succeeded. See the refund policy for how billing data is handled when you ask for a refund.
6. Your rights
Depending on where you live (GDPR, UK GDPR, CCPA/CPRA and similar), you may ask us to confirm what we hold, correct it, delete it, or stop processing it. Because rooms are ephemeral and there are no accounts, in most cases there is nothing to retrieve — but email hi@gameboardly.com and we will confirm in writing either way. You also have the right to complain to your local data protection authority.
7. Cookies and local storage
No marketing cookies, no analytics cookies, no cross-site pixels. A game room uses in-memory state and a session identifier so that a student who refreshes the buzzer page rejoins the same room. Nothing persists after the room ends.
8. Security
The site is served over HTTPS only. Data lives on a single server we control, not in a third-party database. Rooms are held in memory, which limits both exposure and retention. No system is perfectly secure, and we do not claim otherwise.
9. Changes
If this policy changes materially — for example if we add accounts, saved classes or payments — we will update this page and change the date at the top. Continued use after a change means you accept the updated policy.
10. Contact
hi@gameboardly.com. See also our Terms of Use.