Board Privacy Policy

Effective Date: August 4, 2026

Harris Hill Products Inc. (“Harris Hill,” “we,” “us,” or “our”) offers a proprietary gaming console with a large screen that interacts with physical game pieces and allows for multi-player experiences the “Board”. . This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you purchase or use our Board gaming console (“Board”) and related games available for download and installation on Board, as well as when you interact with our website, services, and player account features.

Our privacy policy is intended to provide you with information about how we may collect, use, and disclose your personal information. It also explains certain of your choices and privacy rights. The privacy policy is an informational notice, not a contract, and does not create obligations on you or on us beyond those that apply under the applicable law.

1. Information We Collect

We collect information about you and additional users of the Board in the following ways:

A. Directly From You

• Primary Account Holder Responsibility: Each Board device is associated with a single primary account holder, who creates and manages the profiles used on the device (including any profiles for children or other household members). The primary account holder is responsible for accepting this Privacy Policy on behalf of all users of the device and for managing privacy settings, including marketing preferences, for everyone using their Board. If you are the primary account holder, you must inform all users of the Board device of this privacy policy, and where required by applicable law, secure their consent to it. If any of these users are your minor children, you provide any legally required consent to this privacy policy on their behalf.

  
  

• Profile and Primary Account Information: When you purchase and set up the Board, we collect certain information to create your account and enable use of the Board, including email address, password, date of birth, profile name, PIN, account preferences and settings.

• Subaccount information: If you create additional player profiles linked to your primary account, we collect limited account details such as a profile name, avatar, and PIN in respect of those additional players to help configure appropriate gameplay settings.

  • For both primary accounts and subaccounts, you may use a profile name that is not your real name if you wish. 

• For both primary accounts and sub accounts, we collect information regarding device health (e.g. operating system performance), crash logs, game usage information associated with the use of the device by that account. Primary account holders may view some of this information in respect of the subaccounts for their device. 

• Payment and Transactional Data: When you make a purchase through the Board, or through our website, we collect information needed to complete your transaction      including name, shipping information and purchase history. You may add a payment method by scanning a QR code displayed on your Board device and entering your card details, or using Apple Pay or Google Pay, on your phone through a payment form hosted by our third-party payment processor. Payment card information (such as full card number and security code) is collected and processed directly by our third-party payment processor through its hosted payment interfaces and full payment information is not received or stored by us. For security and fraud prevention, we receive information including your credit card brand, the last four digits of your card number, and its expiry date. We do not store full payment card numbers or security codes. Billing address information, if required, is similarly collected and retained solely by our payment processor and is not received or stored by us. In some cases, your billing address information may be the same as your shipping information, which we do receive. If you choose to save a payment method for future purchases, we store limited card display information, such as card brand, last four digits, and expiration date, along with payment processor reference identifiers, to facilitate your use of the on-device wallet. Saved payment methods and shipping addresses are synced to your Board device for display and selection at checkout. We may also maintain a credit balance associated with your account, including the balance amount and currency. We also maintain records of your purchases, transaction history, shipping addresses, fulfillment status, refunds and related customer support and audit information. Your payment and order information is processed by third-party service providers, who handle your information in accordance with their own privacy policies.     

• Reviews and Feedback: If you voluntarily provide reviews or other feedback about Board or your gaming experience (e.g., ratings, comments), we collect and process this information to improve our products and customer experience. With your consent, your review may be published on our website and through other channels. You can choose to post your review either with or without your display name, and you choose what information you include in your review. Please note that after information is published, we cannot control and are not responsible for, what third parties may do with it.  

• Marketing Information: When you register to receive marketing communications from us or otherwise provide data for marketing purposes or interact with our marketing communications, we may collect your name, email address, phone number and your preferences for receiving communications about our services and details about how you engage with our communications.

B. Automatically When You Use the Board

• Device data: When you use Board, we automatically collect certain device data to help ensure proper functionality, enhance your gaming experience, sync your games across platforms and devices, and provide technical support. This includes hardware IDs, serial numbers, operating system and firmware versions, and other technical identifiers, including device identifiers (serial number, hardware identifiers, Wi-Fi MAC address, device-assigned UUID), software and firmware versions (operating system build, bootloader, installed app and game versions), network context (IP address, region derived from IP, connection type), operational telemetry (crash reports, error and diagnostic logs, performance metrics), usage events (game launches, feature interactions, store activity), and locale settings (time zone, language), and information regarding device health (e.g. operating system performance), crash logs, game usage. Information regarding device health may be connected with user accounts. 

• Usage data: We collect gameplay and usage information, such as games played, session durations, interactions of the Board with physical game pieces, and saved-game progress, to provide you with our services (e.g. by allowing you to play and save games), and to understand how you use Board and improve your experience.

• Network and security data: To help provide secure and reliable communication between Board and our servers, we collect network-related data including IP addresses, connection type, and network quality indicators. For account security purposes, we also log security-related events such as unsuccessful login attempts and PIN resets. Information about crashes, errors, and device performance, is described in the 'Diagnostic and Analytics Data' section below.     

• Third Party Services: When you access third-party services through our services, these third-party services may be able to (i) collect information directly from you or about you, including information about your activity on our services; (ii) integrate into their services third party trackers; and (iii) notify your connections on the third-party services about your use of our services; in each case, in accordance with their own privacy policies. Third party services may include games offered by third party developers. When you use such third-party services, please review their privacy policies carefully. We cannot control, and are not responsible for, how such third parties may use the personal information they collect.

C. Automatically When You Use Our Website

Like most websites, our website uses cookies and similar technologies. We collect information such as IP addresses, browser type, referring URLs, page views, and interactions with our website (such as the portions of our website you view, the duration of visit, and links clicked), to analyze website traffic, personalize content, and improve your experience. In particular, we use the following tools for automatic data collection:

Cookies, which are text files that websites store on a user’s device to uniquely identify the user’s browser or to store information or settings in the browser for purposes that include helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns. 

We use the following types of cookies:

• Strictly necessary cookies: These cookies are strictly necessary to provide you with services available through our website. They provide page navigation functionality and access to secure areas. You can set your browser to block these cookies, but then some parts of the services will not work.

  
  

• Performance Cookies: These cookies are used to compile aggregated statistics about use of our website (such as number of page views or visitors and time spent on each page). This helps us improve the way our website works and present more relevant information.

  
  

• Advertising Cookies: These cookies are used by third parties to deliver advertisements more relevant to you and your interests when you are on other sites across the internet. The information collected by these cookies will be used to track visits and actions on our website, as well as to deliver reporting and analytics to us and our partners.Depending on where you live, you may have a right to opt out of the use of your information for targeted advertising. Where we offer an on-site opt-out tool (including for visitors in Canada and certain U.S. states, such as California), you can opt out by updating your preferences here. Wherever you are located, you can also limit targeted advertising through the browser-based settings and tools described in the ‘Limit online tracking’ section below.. 

  Functional Cookies: These cookies allow our website to provide enhanced, more personal features and customized content, such as to remember information users have entered or preferences users have selected. For example, cookies can tell us which language you prefer, what jurisdiction you reside in, and what your communications preferences are. They can help you fill out forms on our website more easily.

We may work with third parties to help us carry out the purposes described above. For example, Google Analytics, and Supermetrics collect information about how users use our website, which we then use to compile reports that disclose trends without identifying individual visitors, and help us improve our website. For more information on Google Analytics, including how to opt-out, click here. For more information on Supermetrics, click here.

We also use technologies other than cookies for these purposes. These include: 

• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.

• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

D. Social Media Widgets

If you interact with us through third-party social media platforms, you or the platforms may provide us with personal information about you, depending on your privacy settings on these platforms. Please refer to each platform’s privacy policy for details on how they handle your personal information.

E. Diagnostic & Analytics Data

Board collects two categories of operational data, Error Data and Analytics, We also collect operational data needed to run the Board.      

Error Data (Diagnostics). This allows us to receive information about errors, crashes, and other technical problems your Board encounters. This helps us identify and fix bugs and improve the stability of the device and the software running on it. The data we receive in this category includes:

• Crash reports, application errors, and unresponsive-app reports

• Stack traces and exception details

• Device serial number, hardware model, OS version, app and component versions

• Limited contextual information at the time of the error, such as the screen or action being performed (with personal information removed)

• Performance metrics tied to a specific error, such as memory and CPU state

Analytics (Usage and Improvements).This allows us to receive aggregated information about how Board and its built-in software are used, so we can understand which features are valuable, identify usability issues, and improve the product over time. This category covers the analytics events sent by Board system software. Games we publish on Board may collect their own gameplay analytics through embedded analytics services; that data flow is described under 'First-party game analytics' below. The data we receive in the Analytics category includes:

• App and game session events (which built-in apps and games are launched, session duration, profile switches)

• Feature engagement (which menus, settings, and built-in features are used)

• Device health and performance signals such as heartbeats, frame rates, and resource consumption

• Usage trends, such as time-of-day activity patterns     

First-party game analytics. Games we publish on Board include an embedded analytics service provided by GameAnalytics, which collects information about gameplay events such as level starts and completions, session length, in-game errors, and aggregate device information (such as device model and OS version). GameAnalytics receives this data directly from the game and handles it in accordance with its own privacy policy, which you may view by clicking here. This data flow is specific to games we publish; it does not collect information from third-party games on Board.

Data we always collect. Certain data is essential to operating Board and it is not possible to disable the collection of this data:     

• Device activation and registration data

• Software update check-ins (required to deliver and verify OTA updates)

• Account authentication traffic (required to sign in and maintain your session)

• Security telemetry related to known vulnerabilities or active threats, where applicable

Data we never collect through either pipeline. We do not collect the following through either of the pipelines above:

• The contents of gameplay in third-party games (each game's developer is responsible for the data it collects, as described in its own privacy policy)     

• Wi-Fi network names (SSIDs) or Wi-Fi passwords

• The contents of your saved game data

• Photos, contacts, files, or any data not generated by Board system software

Analytics data described above is sent to and processed by our own backend systems hosted on Amazon Web Services. Gameplay analytics from games we publish are sent to GameAnalytics, as described above.          

2. Children’s Privacy

We take children’s privacy seriously. When adults create subaccounts for children under 13, in the context of such accounts, we collect limited information required for internal operations and support of the game. Specifically, we collect usernames (you may choose a username that does not identify the child), device health data, crash logs, and usage statistics to ensure device functionality, game stability, and security. We do not collect or use children’s information for advertising, profiling, or direct communication with the child.

Parents or guardians managing subaccounts of minor children may review or request deletion of their children's information at any time by contacting us at hello@board.fun.

3. How We Use Information

We use your information for the following purposes:

• Provide, maintain, and enhance the functionality and performance of the Board, including to manage your accounts and subaccounts, process payments and transactions, and provide assistance.

• Communicate with you, including by sending announcements, updates, security alerts, and support and administrative messages.

• Direct marketing and targeted advertising. We may send you direct marketing communications and targeted ads as permitted by law, including by email. You may opt-out of our marketing communications as described in the “Opt-out of marketing communications” section below. We do not collect or use any children data for marketing or advertising purposes. 
• Review and respond to feedback, product reviews, and support requests you submit. We use such input to improve our products and services, and in the instance of customer support requests, for purposes of resolving your support requests. When you provide a product review, you consent that your product review may be published on our website and through other channels.

• Research and development. We analyze user data – such as general usage patterns, and feature engagement – to understand how users interact with the Board. We may also create aggregated, de-identified or anonymized data from any of the personal information we collect, including by removing information that makes the data personally identifiable to a particular user. This helps us identify what features are most helpful, detect potential technical issues, and continuously improve the effectiveness, usability, and design of the Board and your gaming experience.

• For compliance and safety. We use personal information to comply with legal and regulatory obligations, enforce our terms, protect our rights and the rights of others, and maintain the security and integrity of our services. This includes preventing, detecting, and responding to fraud, unauthorized activity, and cybersecurity threats; conducting audits and investigations.

• Internal access. Authorized personnel, including customer support staff, may access your account, order and audit information as necessary to investigate disputes, respond to support requests, prevent fraud, and help maintain the security and integrity of our services. Such access is logged and subject to internal controls.

  4. How We Disclose Information

We may disclose personal information to:

• Other users. User information is private by default and is not visible to other users unless both users actively choose to connect using the Board’s optional social features (if such features become available). If users choose to connect with one another, they may see each other’s username, game history, and performance data (such as rankings or achievements). In addition, your profile name and certain performance metrics, such as rankings and achievements, may appear on leaderboards visible to other users.

• Service providers. Companies and individuals that provide services on our behalf or help us operate the Board or our business (such as hosting, information technology, user support, payment processing, order management, email delivery, and website analytics services). These include, among others: Stripe, which processes payments and stores payment credentials on our behalf and to which we may provide your email address so that Stripe can send you transaction receipts (For the Stripe Privacy Policy Click Here); Shopify, which manages order creation, fulfillment, tax calculation, and shipping, and receives shipping address, order details, and customer email (For the Shopify Privacy Policy Click Here); and Amazon Web Services, which provides hosting, database, and infrastructure services for our backend systems  (For the Amazon Web Privacy Policy Click Here). We do not sell personal information to, or share personal information for advertising purposes with, our payment or order management service providers.

  We share personal information with companies and individuals that provide services on our behalf or help us operate Board or our business (such as hosting, information technology, customer support, payment processing, order management, email delivery, and crash and error monitoring). These include, among others:

  •  

    • Shopify, which is our e-commerce platform of record. Shopify manages our product catalog, order creation, fulfillment, tax calculation, shipping rate selection, and transactional emails (order confirmation, shipping updates). For purchases made directly on our Shopify storefront, Shopify also processes the payment and receives all checkout information you provide, including name, email, billing address, shipping address, and payment card details, in accordance with Shopify's privacy policy.

    • Stripe, which processes payments for purchases initiated from your Board device. We provide Stripe with your email address and an internal user identifier so that Stripe can associate the transaction with you and send you a payment receipt. You enter payment card details, cardholder name, and billing address directly on Stripe's hosted payment page; we do not have access to your full payment card information. Stripe acts as our service provider for certain processing and as an independent controller for fraud prevention and regulatory compliance, in accordance with Stripe's privacy policy.

    • Amazon Web Services (AWS), which provides hosting, database, content delivery, large language model inference (via Amazon Bedrock), and other infrastructure services for our backend systems.

    • Gorgias, which provides customer support ticketing and customer relationship management (CRM), and receives your name, email, order history, device identifiers, and the contents of support communications you initiate with us. (For the Gorgias Privacy Policy Click Here)

    • Sentry, which provides crash and error monitoring for the Board device and our software. Sentry receives the diagnostic data described in Section 1.E.(For the Sentry Privacy Policy Click Here)

    • GameAnalytics, which provides gameplay analytics for games we publish on Board, and receives gameplay event data (such as level starts, completions, session length, and in-game errors) along with aggregate device information (such as device model, OS version, and country) directly from these games.(For the GameAnalytics Privacy Policy Click  here)

    • Klaviyo, which provides email marketing and customer communications, and receives your name, email address, purchase history, and engagement data (such as whether you opened or clicked our emails) to send you marketing emails you have consented to receive. You can unsubscribe at any time via the link in any marketing email.(For the Klaviyo Privacy Policy Click Here)

• Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

• Authorities and others. Law enforcement, government authorities and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above, including to enforce our terms, protect our rights and the rights of others, and maintain the security and integrity of our services.

• Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, our company (including, in connection with a bankruptcy or similar proceedings).

• Other third parties, where applicable, at your direction or with your consent.

5. Your Privacy Rights and Choices

We offer you the following options and rights in respect of your personal information. Your privacy rights may vary based on the state, province or territory in which you live, and are subject to limits set out in the applicable laws.

• Marketing communications opt-out. You may opt out of marketing-related emails and other communications by following the opt-out or unsubscribe instructions in the communications you receive from us. You may also contact us as provided in the “Contact Us” section below to unsubscribe. Even if you opt out of marketing-related communications, you may continue to receive service-related and other non-marketing emails.

• Account information. You may update or delete certain of your account information by contacting us at hello@board.fun.

You may view, add, or delete saved payment methods and shipping addresses through your Board device. When you delete a saved payment method, we instruct our payment processor to remove the associated payment credentials from its systems. When you delete a shipping address, it will no longer be available for future transactions; however, the address data may be retained in our systems in a deactivated state until your account is closed. Deletion of your Board account will result in the removal of your saved payment methods, shipping addresses, and associated payment processor records, subject to our retention of transaction and audit records as described in the "Retention" section below.

Please note that even if you request deletion of your account or other information, we may retain certain of that information where required or permitted to do so by applicable law, for example, where such information may be required to defend our rights, or those of others.       

• Personal information requests. We also offer you choices that affect how we handle your personal information. Depending on your location, you may request the following in relation to personal information:

  • Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.

     

  • Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.

     

  • Correction of personal information that is inaccurate or out of date.

     

  • Deletion of personal information that we no longer need to provide our services or to carry out the other purposes described in this privacy policy, or for other lawful purposes, via the App. 

     

  • Opt out of the sharing of your personal information or use of your information for targeted advertising, by limiting tracking as described below.

     

  • Opt out of “profiling” in connection with decisions that produce legal or similarly significant effects. We do not engage in profiling in connection with decisions that produce legal or similarly significant effects.

     

  • Where applicable, you may withdraw your consent to our processing of your personal information. This won’t affect anything we have used your personal information for before you withdraw your consent. If the processing of personal information you withdraw consent in respect of is necessary for us to provide our services, we may no longer be able to offer those services to you. 

     

  • To complain to us regarding our processing of personal information or appeal our denial of your personal information request by contacting us as set out in the “Contact Us” section below.

If you are a parent or legal guardian, you may also exercise these rights on behalf of your minor child, whose subaccount you created.

To make a request, please email us or write to us as provided in the “Contact Us” section below. We may ask for specific information from you to help us confirm your identity. You are entitled to exercise the rights described above free from discrimination.

Finally, you also have a right, where provided by applicable law, to lodge a complaint with a competent data protection authority where you reside, where we are based or where an alleged infringement of data protection law has taken place. For individuals in Canada, this includes the Office of the Privacy Commissioner of Canada and provincial privacy regulators.

Limits on your choices. In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. 

Limit online tracking. There are a number of ways to limit online tracking, which we have summarized below:

• Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://www.allaboutcookies.org/. 

• Using privacy plug-ins or browsers. You can block our websites from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt out of Google Analytics by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout. 

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

Global Privacy Control. We honor Global Privacy Control (“GPC”) signals where required by applicable law. GPC is a browser-based setting that communicates your preference to opt out of certain types of data sharing or targeted advertising. When we detect a valid GPC signal, we will treat it as a request to opt out for that browser and device. Separately, some browsers can be configured to send “Do Not Track” signals; we currently do not respond to “Do Not Track” signals. To learn more about “Do Not Track,” visit http://www.allaboutdnt.com.

6. Other Sites, Mobile Applications And Services

Our website may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. Other websites and services follow different rules regarding the collection, use and disclosure of your personal information. We encourage you to read the privacy policies of the other websites and mobile applications and online services you use.

7. Security

We employ a number of technical, organizational, and physical safeguards designed to help protect the personal information we collect. Payment card information is collected directly by our PCI-compliant payment processor and is not stored on Board devices or our servers. We encrypt data in transit using industry-standard TLS encryption and at rest using encrypted databases with separately managed encryption keys. However, no security measures are failsafe and we cannot guarantee the security of your personal information.

Personal information may be accessed by persons within our organization, or our third-party service providers, who require such access to carry out the purposes described  in this Privacy Policy, or otherwise permitted or required by applicable law.  

8. International Data Transfer

We may store, process and/or transfer your information outside your jurisdiction of residence, including in the United States. Consequently, your information may be subject to the local laws of the jurisdiction to which it is transferred, and it may be accessible to local governments, tribunals, law enforcement and regulatory agencies.

For more information about how we transfer your information, please contact us using the information contained in the “Contact Us” section below.

9. Retention

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations. In particular: saved shipping addresses and payment methods remain active while you maintain them; if you delete a saved address or payment method, it is deactivated and no longer available for use (deletion of a payment method also triggers removal of the associated credentials from our payment processor, after which the processor's own retention policy applies); and transaction records, order history, and internal audit logs are retained for as long as necessary to comply with legal, accounting, tax, dispute-resolution, fraud-prevention, and security obligations.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.

10. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on our website. We may, and if required by law will, also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail (if you have an account where we have your contact information).

Any modifications to this Privacy Policy will be effective upon our posting the updated terms (or as otherwise indicated at the time of posting). In all cases, your continued use of the Board after the posting of any modified Privacy Policy indicates your acceptance of the terms of the modified Privacy Policy.

11. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact us at: legal@board.fun. 

You may also contact our  Chief Operating Officer, Tess Hales, at: 

5 Union Square West, #1036 / New York, NY 10003