Board Privacy Policy

Effective Date: June 29, 2026

Harris Hill Products, Inc. (“Harris Hill,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you purchase or use our Board gaming console (“Board”) and related games available for download and installation on Board, as well as when you interact with our website, services, and player account features.

1. Information We Collect

We collect information about you and additional users of the Board in the following ways:

A. Directly From You

• Account Holder Responsibility: Each Board device is associated with a single account holder, who creates and manages the profiles used on the device (including any profiles for children or other household members). The account holder is responsible for accepting this Privacy Policy on behalf of all users of the device and for managing privacy settings, including error reporting and marketing preferences, for everyone using their Board.

• Profile and Account Information: When you purchase and set up Board, we collect certain information to create your account and enable use of Board, including email address, password, date of birth, profile name, PIN, account preferences and settings.

• Subaccount information: If you create additional player profiles linked to your primary account, we collect limited account details such as a profile name, PIN, and date of birth to help configure appropriate gameplay settings.

• Payment and Transactional Data: When you make a purchase through the Board or through our website, we collect information needed to complete your transaction, including name, shipping information and purchase history. You may add a payment method by scanning a QR code displayed on your Board device and entering your card details, or using Apple Pay or Google Pay, on your phone through a payment form hosted by our third-party payment processor. Payment card information (such as card number and security code) is collected and processed directly by our third-party payment processor through its hosted payment interfaces and is not received or stored by us. We do not store full payment card numbers or security codes. Billing address information, if required, is similarly collected and retained solely by our payment processor and is not received or stored by us. If you choose to save a payment method for future purchases, we store limited card display information, such as card brand, last four digits, and expiration date, along with payment processor reference identifiers, to facilitate your use of the on-device wallet. Saved payment methods and shipping addresses are synced to your Board device for display and selection at checkout. We may also maintain a credit balance associated with your account, including the balance amount and currency. We also maintain records of your purchases, transaction history, shipping addresses, fulfillment status, refunds and related customer support and audit information. Your payment and order information is processed by third-party service providers, who handle your information in accordance with their own privacy policies.

• Reviews and Feedback. If you voluntarily provide reviews or other feedback about Board or your gaming experience (e.g., ratings, comments), we collect and process this information to improve our products and customer experience.

• Marketing Information. When you register to receive marketing communications from us or otherwise provide data for marketing purposes or interact with our marketing communications, we may collect your name, email address, phone number and your preferences for receiving communications about our services and details about how you engage with our communications.

B. Automatically When You Use the Board

• Device data: When you use Board, we automatically collect certain device data to ensure proper functionality, enhance your gaming experience, sync your games across platforms and devices, and provide technical support. This includes hardware IDs, serial numbers, operating system and firmware versions, and other technical identifiers.

• Usage data: We collect gameplay and usage information, such as games played, session durations, interactions with physical game pieces, and saved-game progress, to understand how you use Board and improve your experience.

• Network and security data: To ensure secure and reliable communication between Board and our servers, we collect network-related data including IP addresses, connection type, and network quality indicators. For account security purposes, we also log security-related events such as unsuccessful login attempts and PIN resets. Information about crashes, errors, and device performance, including how it relates to the toggles you control in Settings, is described in the 'Diagnostic and Analytics Data' section below.

• Third Party Services. When you access third-party services through our services, these third-party services may be able to (i) collect information directly from you or about you, including information about your activity on our services; (ii) integrate into their services third party trackers; and (iii) notify your connections on the third-party services about your use of our services; in each case, in accordance with their own privacy policies. When you use such third-party services, please review their privacy policies carefully.

C. Automatically When You Use Our Website

Like most websites, our website uses cookies and similar technologies. We collect information such as IP addresses, browser type, referring URLs, page views, and interactions to analyze website traffic, personalize content, and improve your experience. In particular, we use the following tools for automatic data collection:

• Cookies, which are text files that websites store on a user’s device to uniquely identify the user’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns. 

We use the following types of cookies:

• Strictly necessary cookies: These cookies are strictly necessary to provide you with services available through our website. They provide page navigation functionality and access to secure areas. You can set your browser to block these cookies, but then some parts of the services will not work.

   

• Performance Cookies: These cookies are used to compile aggregated statistics about use of our website (such as number of page views or visitors and time spent on each page). This helps us improve the way our website works and present more relevant information.

• Advertising Cookies: These cookies are used by third parties to deliver advertisements more relevant to you and your interests when you are on other sites across the internet. The information collected by these cookies will be used to track visits and actions on our website, as well as to deliver reporting and analytics to us and our partners.

• Functional Cookies: These cookies allow our website to provide enhanced, more personal features and customized content, such as to remember information users have entered or preferences users have selected. For example, cookies can tell us which language you prefer, what state you reside in, and what your communications preferences are. They can help you fill out forms on our website more easily.

For example  Google Analytics,  and Supermetrics collect information about how users use our website, which we then use to compile reports that disclose trends without identifying individual visitors, and help us improve our website. For more information on Google Analytics, click here. For more information on Supermetrics, click here.

• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.

• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

D. From Social Media

If you interact with us through third-party social media platforms, you or the platforms may provide us with personal information about you, depending on your privacy settings on these platforms. Please refer to each platform’s privacy policy for details on how they handle your personal information.

E. Diagnostic & Analytics Data

Board collects two categories of operational data, each of which you can control independently via Settings → Account → System. Both are enabled by default.

Send Error Data (Diagnostics). When enabled, this allows us to receive information about errors, crashes, and other technical problems your Board encounters. This helps us identify and fix bugs and improve the stability of the device and the software running on it. The data we receive in this category includes:

• Crash reports, application errors, and unresponsive-app reports

• Stack traces and exception details

• Device serial number, hardware model, OS version, app and component versions

• Limited contextual information at the time of the error, such as the screen or action being performed (with personal information removed)

• Performance metrics tied to a specific error, such as memory and CPU state

When disabled, Board will not send error or crash reports to us.

Send Analytics (Usage and Improvements). When enabled, this allows us to receive aggregated information about how Board and its built-in software are used, so we can understand which features are valuable, identify usability issues, and improve the product over time. This setting controls the analytics events sent by Board system software. Games we publish on Board may collect their own gameplay analytics through embedded analytics services; that data flow is described under 'First-party game analytics' below. The data we receive in the Send Analytics category includes:

• App and game session events (which built-in apps and games are launched, session duration, profile switches)

• Feature engagement (which menus, settings, and built-in features are used)

• Device health and performance signals such as heartbeats, frame rates, and resource consumption

• Aggregate usage trends, such as time-of-day activity patterns

When disabled, Board will not send usage or feature-engagement events to us.

First-party game analytics. Games we publish on Board include an embedded analytics service provided by GameAnalytics, which collects information about gameplay events such as level starts and completions, session length, in-game errors, and aggregate device information (such as device model and OS version). GameAnalytics receives this data directly from the game and handles it in accordance with its own privacy policy. This data flow is specific to games we publish; it does not collect information from third-party games on Board, and it is not currently controlled by the Send Analytics setting described above.

Data we always collect, regardless of these settings. Certain data is essential to operating Board and is not covered by either toggle:

• Device activation and registration data

• Software update check-ins (required to deliver and verify OTA updates)

• Account authentication traffic (required to sign in and maintain your session)

• Security telemetry related to known vulnerabilities or active threats, where applicable

Data we never collect through either pipeline. We do not collect the following through either of the pipelines above:

• The contents of gameplay in third-party games (each game's developer is responsible for the data it collects, as described in its own privacy policy)

• Wi-Fi network names (SSIDs) or Wi-Fi passwords

• The contents of your saved game data

• Photos, contacts, files, or any data not generated by Board system software

Scope of these settings. Both the Send Error Data and Send Analytics settings are device-wide, not per-profile. Board account holder is the owner of the device and the consent-giver for everyone using it, and these settings apply to all profiles on the device. The Settings screen reflects this with the label "Applies to all profiles on this device."

Analytics data covered by the Send Analytics setting is sent to and processed by our own backend systems hosted on Amazon Web Services. Gameplay analytics from games we publish are sent to GameAnalytics, as described above.

2. Children’s Privacy

We take children’s privacy seriously. When adults create subaccounts for children under 13, in the context of such accounts, we collect only limited information required for internal operations and support of the game. Specifically, we collect usernames that do not identify the child, device health data, crash logs, and usage statistics to ensure device functionality, game stability, and security. We do not collect or use children’s information for advertising, profiling, direct communication, or any other commercial purposes.

Parents or guardians managing subaccounts may review or request deletion of their children's information at any time by contacting us at hello@board.fun.

3. How We Use Information

We use your information for the following purposes:

• Provide, maintain, and enhance the functionality and performance of the Board, including to manage your accounts and subaccounts, process payments and transactions, and provide assistance.

• Communicate with you, including by sending announcements, updates, security alerts, and support and administrative messages.

• Direct marketing and targeted advertising. We may send you direct marketing communications and targeted ads as permitted by law, including by email. You may opt-out of our marketing communications as described in the “Opt-out of marketing communications” section below. We do not collect or use any children data for marketing or advertising purposes.

• Research and development. We analyze user data – such as general usage patterns, feature engagement – to understand how users interact with the Board. We may create aggregated, de-identified or anonymized data from the personal information we collect, including by removing information that makes the data personally identifiable to a particular user. This helps us identify what features are most helpful, detect potential technical issues, and continuously improve the effectiveness, usability, and design of the Board and your gaming experience.

• Review and respond to feedback, product reviews, and support requests you submit.       We use such input to improve our products and services, and in the instance of customer support requests, for purposes of resolving your support requests.
  

• For compliance and safety. We use personal information to comply with legal and regulatory obligations, enforce our terms, protect our rights and the rights of others, and maintain the security and integrity of our services. This includes preventing, detecting, and responding to fraud, unauthorized activity, and cybersecurity threats; conducting audits and investigations.

• Internal access. Authorized personnel, including customer support staff, may access your account, order and audit information as necessary to investigate disputes, respond to support requests, prevent fraud, and maintain the security and integrity of our services. Such access is logged and subject to internal controls.

4. How We Disclose Information

We may disclose personal information to:

• Other users. User information is private by default and is not visible to other users unless both users actively choose to connect using the Board’s optional social features. If users choose to connect with one another, they may see each other’s username, game history, and performance data (such as rankings or achievements). Certain performance metrics, such as rankings or achievements, may be publicly visible to all users, even if users have not connected.

• Service providers. Companies and individuals that provide services on our behalf or help us operate Board or our business (such as hosting, information technology, user support, payment processing, order management, email delivery, and website analytics services). These include, among others: Stripe, which processes payments and stores payment credentials on our behalf and to which we may provide your email address so that Stripe can send you transaction receipts; Shopify, which manages order creation, fulfillment, tax calculation, and shipping, and receives shipping address, order details, and customer email; and Amazon Web Services, which provides hosting, database, and infrastructure services for our backend systems. We do not sell personal information to, or share personal information for advertising purposes with, our payment or order management service providers.

  We share personal information with companies and individuals that provide services on our behalf or help us operate Board or our business (such as hosting, information technology, customer support, payment processing, order management, email delivery, and crash and error monitoring). These include, among others:

  •  Shopify, which is our e-commerce platform of record. Shopify manages our product catalog, order creation, fulfillment, tax calculation, shipping rate selection, and transactional emails (order confirmation, shipping updates). For purchases made directly on our Shopify storefront, Shopify also processes the payment and receives all checkout information you provide, including name, email, billing address, shipping address, and payment card details, in accordance with Shopify's privacy policy.

  • Stripe, which processes payments for purchases initiated from your Board device. We provide Stripe with your email address and an internal user identifier so that Stripe can associate the transaction with you and send you a payment receipt. You enter payment card details, cardholder name, and billing address directly on Stripe's hosted payment page; we do not have access to your full payment card information. Stripe acts as our service provider for certain processing and as an independent controller for fraud prevention and regulatory compliance, in accordance with Stripe's privacy policy.

  • Amazon Web Services (AWS), which provides hosting, database, content delivery, large language model inference (via Amazon Bedrock), and other infrastructure services for our backend systems.

  • Gorgias, which provides customer support ticketing and CRM, and receives your name, email, order history, device identifiers, and the contents of support communications you initiate with us.

  • Sentry, which provides crash and error monitoring for Board device and our software. When the Send Error Data setting is enabled, Sentry receives the diagnostic data described in Section 1.E.

  • GameAnalytics, which provides gameplay analytics for games we publish on Board, and receives gameplay event data (such as level starts, completions, session length, and in-game errors) along with aggregate device information (such as device model, OS version, and country) directly from the game.

  • Klaviyo, which provides email marketing and customer communications, and receives your name, email address, purchase history, and engagement data (such as whether you opened or clicked our emails) to send you marketing emails you have consented to receive. You can unsubscribe at any time via the link in any marketing email.

  We do not sell personal information to, or share personal information for advertising purposes with, our payment or order management service providers.

• Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

• Authorities and others. Law enforcement, government authorities and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.

• Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, our company (including, in connection with a bankruptcy or similar proceedings).

• Other third parties, where applicable, at your direction or with your consent.

5. Your Privacy Rights and Choices

A. Marketing communications opt-out. 

You may opt out of marketing-related emails and other communications by following the opt-out or unsubscribe instructions in the communications you receive from us. You may also contact us as provided in the “Contact Us” section below to unsubscribe. Even if you opt out of marketing-related communications, you may continue to receive service-related and other non-marketing emails.

B. Account information.

You may update or delete your account information by contacting us at hello@board.fun.

You may view, add, or delete saved payment methods and shipping addresses through your Board device. When you delete a saved payment method, we also instruct our payment processor to remove the associated payment credentials from its systems. When you delete a shipping address, it will no longer be available for future transactions; however, the address data may be retained in our systems in a deactivated state until your account is closed, at which point it will be permanently purged. Deletion of your Board account will result in the removal of your saved payment methods, shipping addresses, and associated payment processor records, subject to our retention of transaction and audit records as described in the "Retention" section below.

C. Personal information requests.

We also offer you choices that affect how we handle your personal information. Depending on your location, you may request the following in relation to personal information: 

• Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
• Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
• Correction of personal information that is inaccurate or out of date.
• Deletion of personal information that we no longer need to provide our services via the App or for other lawful purposes. 
• Opt out of the sharing of your personal information or use of your information for targeted advertising, by limiting tracking as described below.
• Opt out of “profiling” in connection with decisions that produce legal or similarly significant effects. We do not engage in profiling in connection with decisions that produce legal or similarly significant effects.
• Where applicable, you may withdraw your consent to our processing of your personal information. This won’t affect anything we have used your personal information for before you withdraw your consent.
• Appeal our denial of your personal information request by contacting us as set out in the “Contact Us” section below.

If you are a parent or legal guardian, you may also exercise these rights on behalf of your child, whose subaccount you created.

To make a request, please email us or write to us as provided in the “Contact Us” section below. We may ask for specific information from you to help us confirm your identity. You are entitled to exercise the rights described above free from discrimination.

Limits on your choices. In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. 

D. Limit online tracking.

There are a number of ways to limit online tracking, which we have summarized below. Please note that these tools are not associated with us and we cannot guarantee that they work as their providers advertise them:

• Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://www.allaboutcookies.org/. 

• Using privacy plug-ins or browsers. You can block our websites from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt out of Google Analytics by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout. 

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

Global Privacy Control. We honor Global Privacy Control (“GPC”) signals where required by applicable law. GPC is a browser-based setting that communicates your preference to opt out of certain types of data sharing or targeted advertising. When we detect a valid GPC signal, we will treat it as a request to opt out for that browser and device.

6. Other Sites, Mobile Applications And Services

Our website may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. Other websites and services follow different rules regarding the collection, use and disclosure of your personal information. We encourage you to read the privacy policies of the other websites and mobile applications and online services you use.

7. Security

We employ a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. Payment card information is collected directly by our PCI-compliant payment processor and is not stored on Board devices or our servers. We encrypt data in transit using industry-standard TLS encryption and at rest using encrypted databases with separately managed encryption keys. However, no security measures are failsafe and we cannot guarantee the security of your personal information.

8. Retention

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations.  In particular: saved shipping addresses and payment methods remain active while you maintain them; if you delete a saved address or payment method, it is deactivated and no longer available for use, and is permanently purged upon account closure (deletion of a payment method also triggers removal of the associated credentials from our payment processor, after which the processor's own retention policy applies); and transaction records, order history, and internal audit logs are retained for as long as necessary to comply with legal, accounting, tax, dispute-resolution, fraud-prevention, and security obligations.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.

9. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on our website. We may, and if required by law will, also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail (if you have an account where we have your contact information).

Any modifications to this Privacy Policy will be effective upon our posting the updated terms (or as otherwise indicated at the time of posting). In all cases, your continued use of the Board after the posting of any modified Privacy Policy indicates your acceptance of the terms of the modified Privacy Policy.

10. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact us at: hello@board.fun.