Privacy statement

Who we are

OFC Board (ofcboard.com) is a service of Trietment. We decide what data we process for OFC Board and why, and we're responsible for it. Questions about your data go to info@ofcboard.com.

What we keep, and why

Your account

Your email address, your first and last name and your password. You sign in with your email address, and it's where we send the emails that come with your account; your fellow players see your name at the table. We only keep your password as a hash (bcrypt), so we can't read it ourselves. We also keep when you confirmed your email address and accepted the terms, which language and theme (auto, light or dark) you want the site in — our emails to you come in that language too — and, until you've confirmed it, a new email address you want to switch to. If you never confirm your email address, and you're not in any group, we delete your account after seven days.

When you choose a new password, we check with the Pwned Passwords service whether it appears in a known data breach. For that we only send the first five characters of a hash of your password. Your password itself, or anything it could be recovered from, never leaves our server.

Two-factor authentication and passkeys

If you turn on two-factor authentication, we keep the secret your authenticator app uses (encrypted) and your recovery codes (as a hash only). For a passkey we keep the public key with the technical details that go with it, the name you give it and when you last used it. Your fingerprint or face never leaves your device.

Your payment details for settling up

An IBAN and a payment link (such as bunq.me, PayPal.me or Revolut) are optional. You fill them in so your fellow players can pay you easily after a game, and we store them encrypted. They only appear when a game in which you're owed money is settled up, and only to the people in that game: the players at the table, the game's host, and the group's owner and organizers. If you haven't filled in an IBAN or a payment link, they see your email address in its place, so they can ask you for a payment request.

Groups, games and scores

For each group we keep its name, who's a member and in what role, and the invitations. If you invite someone by email, we keep that address with the invitation until it's used or expires, even if that person doesn't have an account yet. For each game we keep the players, what a point is worth, the rounds and the scores, who dealt and who was away or sat out. And the saved tables members store. Every player has an account; only an older game or saved table, brought over from trietment.com or made before that was the rule, can also hold the name of a guest without one. Only the group's members see its games and scores. For a group we also keep its party nights (when, and who started one), and for a game who ended it; only the members see that too.

In our admin screen we can see the accounts (name, email address, whether the address is confirmed, whether two-factor authentication is on, how many passkeys there are, on how many devices someone is signed in and how their free trial stands), which groups there are, who's a member of them and in what role, how many places and party nights are used, and how the licenses and payments stand. We need that to run the service and to help you when something goes wrong. Games, scores, your IBAN and your payment link aren't in there.

Free trials

With your account we keep whether you ever joined a group by invitation, whether your account has had a free trial and for which group, and in which groups' free trials you played. That way a group only gets a free trial when the account that starts it never had one and never came in by invitation, and nobody plays free forever in ever new groups. If you joined by mistake and never played, we can give your free trial back; in case of abuse, we can switch free trials off for your account.

Signing in and sessions

When you sign in, we create a session. With it we keep which browser and device you signed in with (the user agent), when you signed in, when you were last active and whether you've done your second step yet. No IP address. A session expires after four hours without activity, and 30 days after you signed in at the latest; when you sign out, we delete it right away.

Protection against abuse

To stop anyone from guessing passwords or codes, or from overloading the site, we count how often an attempt is made per IP address, per account or per email address (the address only as a hash). Such a counter counts for an hour at most (the one for the invitations a group mails to one address: a day), and after a day we delete it from our database.

The server also keeps technical logs of the requests that come in, with the IP address and the page asked for, among other things. Secret codes in links, like the one in an invitation or in a link to reset your password, are made unreadable in them. We only use those logs to look into outages and abuse, and they're deleted automatically after a short time.

Licenses and payments

When you buy a license, we keep which group it's for, who bought it, the amount, when you agreed to the terms, the state of the payment and the references Stripe gives us for it. If you withdraw from a purchase within the cooling-off period, we also keep when you did and when the refund went out. Only the group's owner and organizers see who bought the license and the state of each payment. Stripe gets your email address and your group's name from us, so you don't have to fill them in again and the payment ends up with the right group. You pay on Stripe's own payment page; your card or bank details never reach us. We also keep track of which reminders about the license or the free trial running out we've sent the owner and the organizers, so that each reminder only comes once; that list goes away with the group.

Email

We only send you emails that belong with your account or your group: the confirmation of your email address, a link to reset your password, an invitation to a group, a message to your old address when your email address has changed, or a heads-up when someone tried to create an account with your address. If you own or organize a group, you also get a reminder before that group's license runs out, a month and a week in advance, and the morning after its free trial has started if the group never had a license. Those reminders only go to the owner and the organizers, not to the other members. If you buy a license, you get a confirmation of your purchase, and of your withdrawal if you withdraw from it. No newsletters, no advertising.

Why we're allowed to

• To run OFC Board for you (our agreement with you, GDPR art. 6(1)(b)): your account and signing in, with your sessions, two-factor authentication and passkeys; your language and theme; groups, games, scores and saved tables; settling up after a game; the emails that come with your account, and the reminders to the owner and the organizers about the license and the free trial; and the license itself, including what Stripe gets from us for it. Without an email address, a name and a password there is no account.
• Because the law requires it (a legal obligation, art. 6(1)(c)): we keep payments for seven years, for the tax authorities.
• Because we have a legitimate interest (art. 6(1)(f)): keeping OFC Board secure and running (the attempt counters, the technical logs, the check whether a new password appears in a known data breach); being able to show what was agreed (when you accepted the terms, and when a buyer agreed before paying); delivering an invitation to the address a member typed in, whether that person has an account or not; keeping games and saved tables complete (a guest's name in an older game or saved table, and your name once your account is gone); fair use of the free trial and the license (whether you joined a group by invitation, your account's free trial and the free trials you played in, a group's party nights and who ended a game); and bringing players' accounts and scores over from trietment.com. You can object to this: see Your rights.

Cookies and storage in your browser

We only use cookies the site needs to work: one that keeps you signed in (session_id), one encrypted cookie with short-lived data for forms and signing in (_ofc_board_session), and two that remember your preferences: locale holds your language (English or Dutch) and theme your theme (auto, light or dark). Scripts can't read them, and they only travel over a secure connection.

The sign-in cookie stops working when you sign out (which also removes it), after four hours without activity, or 30 days after you signed in; the one for forms goes when you close your browser. The two preference cookies stay until you clear them. When you're signed in, your account stores your language and theme too, and the cookies follow your account: after you sign out, or when you sign in on another device, you still see the site in your own language and theme. Links in our emails name the email's language (?locale=en or ?locale=nl): a browser that has no language yet takes the one the link names.

On the scoreboard your browser itself remembers three more things: whether the sound is on, which round was last read out, and which tab you had open. That stays on your device and never reaches us. All of this is functional: because we measure nothing and track no one, we don't need to ask for your consent to cookies either.

Who else has access

We don't sell your data and don't share it with advertisers. We work with these parties, who only get what they need for their task:

• Fly.io Hosting and database, in their data center in Amsterdam.
• Stripe Payment for licenses. Stripe is itself responsible for some of what it processes, for example to prevent fraud.
• Soverin Sending and receiving our email.
• Pwned Passwords Only gets a piece of a hash when you set a new password; nothing that could tell anyone who you are.

Some of these parties are American companies. If data ends up outside the European Union, that only happens with the safeguards the GDPR requires for it, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

• Your account: until you have it deleted. One whose email address was never confirmed, and that isn't in any group, we delete after seven days.
• Groups, games and scores: as long as the group exists. If the owner deletes the group, all its games, invitations, saved tables and party nights go with it. Who ended a game or started a party night stays named until that account is gone.
• Free trials: whether you joined a group by invitation, your account's free trial and the free trials you played in, as long as your account exists, even once those groups are gone.
• Invitations: the address an invitation went to, until the invitation is used or expires.
• Your name in old games and saved tables: when your account is gone, your name stays on as a plain name in your group's games, so the standings still add up, and in saved tables other members made. If you ask, we replace it with a neutral name.
• Sessions: until you sign out, and they expire after four hours without activity, or 30 days after you signed in.
• Attempt counters: a counter counts for an hour at most (invitation mails to one address: a day) and is deleted after a day.
• Technical logs: briefly, and only with our hosting provider.
• Payments: seven years, because tax law requires it, even after your group or your account is gone. Once your account is gone, a payment no longer points to it here; Stripe keeps its own record of it.

How we protect your data

• Everything goes over an encrypted connection (HTTPS).
• IBAN, payment link and your two-factor authentication secret are encrypted in the database; passwords and recovery codes only as a hash.
• Our pages load no scripts, fonts or images from anyone else. So nobody else sees that you visit us.
• Groups are private: anyone who isn't a member gets “not found” — even if they know the address of a game.
• We limit the number of sign-in attempts, and you can use a passkey or two-factor authentication.

Your rights

You can always ask which data we have about you, have it corrected or deleted, have its processing restricted, object to it, or get your data in a common format. A lot of it you do yourself: you change your name, email address, password, IBAN and payment link on your account page. For the rest, email us at info@ofcboard.com; you'll get an answer within a month. If you own a group and want your account gone, first transfer the group to another member or delete it.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). We'd rather hear it from you first, of course.

Moved over from trietment.com

Did you keep your scores on trietment.com before? Then we moved your account from there to OFC Board: your name, email address, IBAN and payment link, your password hash and your two-factor authentication, whether you had the scoreboard on light, and your games and saved tables from there. Passkeys couldn't come along, because they belong to trietment.com. Feel free to create a new one here.

Changes

If anything significant changes in how we handle your data, we update this page and let you know by email. At the top you can see when it was last updated.