Privacy and visibility in MeepleMates

Data used by the app

The app stores the information needed to run board game groups and game days, such as accounts, group memberships, collection items, play logs, comments, ratings, messages, invitations and notification settings.

• Public game pages use aggregate and public game metadata.
• Group-only photos and game day details are restricted by membership/guest access.
• Public photos are visible to active signed-in users, not anonymous visitors.

Digital sovereignty

MeepleMates is developed, maintained and hosted in the EU. Core application data is handled within the EU. Optional third-party features described below may process only the data a user deliberately submits to them, potentially outside the EU.

• The service is operated from an EU-first hosting and maintenance model.
• Private group data, game day data, messages and uploaded photos are kept under MeepleMates access controls.
• Public pages expose only public metadata and aggregate signals intended for discovery.

AI rules questions and voice

When a user chooses to use Rules assistant, MeepleMates sends the selected game context and the written question to OpenAI for an answer. If the user chooses Voice, a recording of up to 60 seconds is sent to OpenAI for transcription before the resulting text is used as the question. This processing may take place outside the EU under the provider’s API terms and retention controls.

• Voice is optional; the same feature can be used with typed text.
• MeepleMates does not intentionally save the raw voice recording in its database. The recording is held temporarily on the device and during request processing.
• On mobile, answer text may be sent to OpenAI to generate an AI voice. The generated audio is not saved in the MeepleMates database or permanent storage; the device keeps only a temporary playback cache. Device text-to-speech is used as fallback.
• Do not include personal, confidential or sensitive information in AI questions or voice recordings.

User control

Users can manage profile details, collection settings, notification settings and photo tags according to their permissions. Tagged users can remove their own tag from game day photos.

Account and data deletion

Anyone can use /feedback#data-deletion to privately request deletion of a MeepleMates account and associated data, or selected data without deleting the account. The page explains identity verification, deletion scope and retention periods.

Operational note

MeepleMates uses server-side access checks for private data. Administrators should still configure backups, storage and deployment secrets carefully in production.