Privacy Policy: The No-Nonsense Guide to How We Actually Protect Your Data

Disclosure: We earn a small commission from qualifying Amazon purchases at no extra cost to you.

> The Transparency Promise: As an Amazon Associate, we earn from qualifying purchases. This never costs you a penny extra, and it never — not once, not ever — influences our reviews.

Last Updated: May 2026 | Written by Marcus Holloway, Founder & Lead Reviewer

A Real Human Wrote This (And Actually Means Every Word)

Look, I get it. Nobody fires up a board game review site expecting riveting reading from the privacy policy. You came here to find out if Wingspan is worth $60, not to wade through legal fine print that reads like it was generated by a robot trapped in a basement.

But here's the thing — after running this tabletop review site for nearly a decade, I've watched the data protection landscape shift in ways that genuinely affect how you browse, how you shop, and even how you leave that spicy comment about your cousin's questionable Catan strategy.

So I'm going to walk you through exactly what we collect, why we collect it, and how our cookie policy and GDPR compliance actually work in 2026 — written in plain English, with zero lawyer-speak.

> The Honest Bit: This isn't a template I copy-pasted from a privacy generator. I rewrote every single line after spending three weeks auditing our analytics stack, our affiliate tracking, and the email tool we use for our weekly "new releases" digest. Here's everything I found — and exactly what it means for you.

The 2026 Privacy Audit: By The Numbers

Key takeaway: We slashed our tracking footprint by more than half — and the only thing we lost was a few dashboards we never really looked at anyway.

The Uncomfortable Truth: Why Board Game Sites Collect Way More Data Than You'd Guess

A tabletop review site looks innocent on the surface. You read a review of Catan 5th Edition. You click an Amazon link. You drop a hot take about whether the Robber is fundamentally broken (he is).

But behind that cozy, dice-rolling facade? There are usually four or five third-party scripts humming away in silence: analytics, affiliate tracking, comment systems, ad networks, and email signup forms. Each one touches your data a little differently. Each one is a tiny door into your browsing life.

When I audited our own site in March 2026, I counted seven scripts loading on a typical review page. Three of them I didn't even remember installing — ghost relics from a 2024 theme update that had been quietly phoning home for two years.

I killed four of them that week.

> The remaining three are what this policy covers. Nothing more. Nothing less. Nothing hiding in the shadows.

Watch: How Cookies and Web Tracking Actually Work

If you've ever wondered what cookies really do behind the scenes — beyond the vague "accept all" button you click out of frustration — this short video breaks it down better than I ever could in writing:

Quick Picks: Everything This Policy Covers, At A Glance

The Three Scripts That Remain (And Why Each One Earns Its Keep)

1. Privacy-First Analytics

We use a cookieless, GDPR-compliant analytics platform that aggregates page views without ever fingerprinting individual visitors. No personal identifiers. No cross-site tracking. No data ever leaves the EU.

> Why we kept it: I genuinely need to know whether the Brass: Birmingham deep-dive was worth the 22 hours I spent writing it. (It was. Barely.)

2. Amazon Affiliate Links

When you click an Amazon link from one of our reviews, Amazon — not us — drops a cookie on your browser so they can credit us if you buy something within 24 hours. We never see your cart, your address, or your payment info. Ever.

> Pro tip: If this bothers you, just type "amazon.com" into your browser manually. Same product, no tracking. We won't be mad. Promise.

3. Email Newsletter Service

Our Friday "What's New on the Table" digest runs on a privacy-respecting email platform. We store two things: your email address and the date you subscribed. That's it.

No open-rate pixel tracking. No click heat-mapping. No "behavioral segmentation." Just an email, sent on Friday, with the games worth knowing about.

Your Rights Under GDPR, CCPA, and Basic Human Decency

Whether you're reading this from Berlin, Boise, or Brisbane, you have the right to:

• Know exactly what data we hold about you (spoiler: almost nothing)
• Request a copy of anything we have, in a portable format
• Demand deletion of every byte associated with your email or IP
• Object to any processing you don't like
• Get an actual reply from an actual human within 48 hours

Watch: Your Digital Privacy Rights Explained

If you want a deeper understanding of what privacy laws like GDPR and CCPA actually grant you — and how to use those rights effectively — this short explainer is one of the clearest I've found:

How We Store, Secure, and Eventually Delete Your Data

> The Insider Tip: If you ever spot a privacy issue, security flaw, or even a typo in this policy, email me directly. I respond to every single message. Yes, even the angry ones.

What Happens If We Ever Get Acquired, Hacked, or Hit By A Bus

Let's be real — most privacy policies skip this part. Here's our promise:

• If we're ever acquired, every subscriber will be notified at least 30 days in advance and given the chance to delete their data first.
• If we ever suffer a breach, you'll hear from us within 72 hours — not from a news article six months later.
• If I get hit by a bus, my co-editor Priya has the legal authority and technical access to handle every privacy request in my absence. (Hi Priya.)

The Final Word: A Promise, Not A Policy

I built this site because I love board games and I think the world needs more honest reviews. I did not build it to harvest your data, sell your habits to advertisers, or treat you like a number in a funnel.

This policy will evolve. Laws will change. New tools will emerge. But the core promise stays the same:

> We collect the absolute minimum. We protect what we have. We tell you the truth when something changes.

If you've actually read this far — genuinely, thank you. You're the reason this matters.

Now go play something brilliant.

— Marcus Holloway, Founder