Hide activity

[Mach3Racer]

I can confirm that this site and its staff are most likely not in compliance with European law (GDPR) in several instances and when this is pointed out to them (which according to European law (GDPR again), does not even take a formal request or any specific type of wording - this to protect the consumer/end user) their response is silence, complete silence and ignoring it.

I would highly recommend anyone to increase the volume on this in any communication with BGA and also insist on whoever is replying from generic email addresses to identify themselves. A simple communication towards them (no matter the channel, i guess email would be the easiest.) mentioning a full request for personal data stored and e.g. who this was/is available to and who has accessed it should work nicely. Add GDPR to the wording (not even necessary, strictly speaking). This gives them a timeline of exactly 30 days from request to respond in full, otherwise they are officially breaching and non compliant with GDPR. Something they probably will want to avoid due to how European consumer law is not sth. companies should mess with...

Very disappointing from a simple customer service perspective and VERY QUESTIONABLE if not litigable from a GDPR standpoint.

Regards,
M3R

Case in point: I have effectively been locked out from all of BGA (except forums) for about a month now incl. not even being able to access my personal account & settings (incl. cancelation of premium et al). Instead some anonymous, unidentified person using a BGA official email has asked for personal identifiable information (PII) via said unauthenticated email channel (a most dubious practice, again under GDPR and other privacy laws), ridiculed my simple requests and otherwise all but ignored my valid concerns.

[TX-Bluebonnet]

58 votes now. Also found out the public can view all the profile information too:

https://boardgamearena.com/forum/viewto ... =3&t=16280

Yes, I saw that as well. The bug report is up to 65.

Up to 89 votes now.

[Mach3Racer]

Next to the bug request path, I strongly recommend all interested users to take individual action in the form of a GDPR request towards BGA via email.

It does not have to have any specific wording per se, just mention that you request a full report and all available insights as conforming with GDPR.

They have 30 days to respond.

Best regards,
M3R

[N_Faker]

Privacy policy & cookies

To create an account, you need to provide an email, user name and password. You may also complete your player profile with some other data.

We store this data. Yep. It would be pretty annoying for you to enter it each time you visit

If you care a lot about your datas and never provide any website with accurate personal information, congratulations! You can skip this section

This BGA policy has been written to comply with some laws + social network authentication policies. However, if you are still interested please read on the following instead of going straight to playing :

_ We are using cookies, otherwise you would need to choose a language + re-enter your password each time you visit BGA.

_ Your password is stored encrypted, but the usual precautionary measures apply. You should use a strong password and not use the same one that you use for sensitive websites. Some expert would say to never to use the same passwords, but this feels like excessive blunt force to the head, except for websites that have very sensitive information. This shouldn't be the case for a gaming website, but hey, do as you please.

_ Chat discussions are stored during a maximum of 11 weeks, for moderating purposes. Moderators - who are other players we selected among the community - may have access to any chat discussions from the past 11 weeks, which is normal because 80% of the moderations concern insults/aggressive behaviors in the chat. If you are worried about this, we remind you to consider that all your chat discussions on BGA are public.

_ We don't share or sell your datas with third parties without your consent. Your consent may be implicit in some obvious cases (such as if you take part in a contest with rizes from a publisher, as some information will be needed for the publisher to contact you to redeem the prize).

_ Your profile information is visible to other players, as well as your gaming history on the website. So, since anyone can create an account on the site, it should be considered public information. But if you use a pseudonym for your username, it would help to keep your real identity private (in case you would be worried about that).

Hope this all sounds reasonable to you, and that you can now enjoy Board Game Arena without second thoughts!

Cheers and doughnuts,

The admins.

[Meeplelowda]

Privacy policy & cookies

To create an account, you need to provide an email, user name and password. You may also complete your player profile with some other data.

We store this data. Yep. It would be pretty annoying for you to enter it each time you visit

If you care a lot about your datas and never provide any website with accurate personal information, congratulations! You can skip this section

This BGA policy has been written to comply with some laws + social network authentication policies. However, if you are still interested please read on the following instead of going straight to playing :

_ We are using cookies, otherwise you would need to choose a language + re-enter your password each time you visit BGA.

_ Your password is stored encrypted, but the usual precautionary measures apply. You should use a strong password and not use the same one that you use for sensitive websites. Some expert would say to never to use the same passwords, but this feels like excessive blunt force to the head, except for websites that have very sensitive information. This shouldn't be the case for a gaming website, but hey, do as you please.

_ Chat discussions are stored during a maximum of 11 weeks, for moderating purposes. Moderators - who are other players we selected among the community - may have access to any chat discussions from the past 11 weeks, which is normal because 80% of the moderations concern insults/aggressive behaviors in the chat. If you are worried about this, we remind you to consider that all your chat discussions on BGA are public.

_ We don't share or sell your datas with third parties without your consent. Your consent may be implicit in some obvious cases (such as if you take part in a contest with rizes from a publisher, as some information will be needed for the publisher to contact you to redeem the prize).

_ Your profile information is visible to other players, as well as your gaming history on the website. So, since anyone can create an account on the site, it should be considered public information. But if you use a pseudonym for your username, it would help to keep your real identity private (in case you would be worried about that).

Hope this all sounds reasonable to you, and that you can now enjoy Board Game Arena without second thoughts!

Cheers and doughnuts,

The admins.

You copied this without commentary as if it is dispositive of this issue. The days of being able to do whatever you want in terms of privacy under a browse-wrap license as long as you disclose it somewhere on the site are over.

[N_Faker]

You copied this without commentary as if it is dispositive of this issue. The days of being able to do whatever you want in terms of privacy under a browse-wrap license as long as you disclose it somewhere on the site are over.

You are barking up the wrong tree here.

[Mach3Racer]

No, he rightfully exposed the lackluster type of response users are getting from this site as what it is: inadequate.

Regarding barking up the wrong tree: Since you claim to be the wrong tree, N_Faker, what is your specific role with BGA, if any, and reason to come into this thread with a post like this?

On topic: Next to not being at all sufficient to answer or quiet an actual GDPR request by a enduser (what else could be the motivation for this posting), I would like to reiterate my recommendation for anyone using this site to file a request with BGA on this matter. It transpires and becomes yet more adequate that they are most like not currently compliant with GDPR and unable to properly cater to the needs of engaged and concerned users with regards to the users data and privacy.

Regards,
M3R

[Mach3Racer]

*crickets*, unsurprisingly.

[helpfulturn]

Bumping this thread. Please vote here, over 100 votes now and devs still haven't looked at it: https://boardgamearena.com/bug?id=17208

[Meeplelowda]

Bumping this thread. Please vote here, over 100 votes now and devs still haven't looked at it: https://boardgamearena.com/bug?id=17208

It has possibly been looked at and ignored.