Back to Home

Privacy Policy

Last updated: 9/4/2026

Introduction

Bridge Boards is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data. As the service is published from France, the General Data Protection Regulation (GDPR) applies to all our users, regardless of their country of residence.

Data Controller

The controller of your personal data is Romaric GUTH, a sole trader registered under SIRET number 95209879600016, reachable at contact@romaricguth.com. Given the nature and volume of the processing carried out, no data protection officer has been appointed.

Personal Data Collected

Account Information

  • Email address (required for registration and account recovery)
  • Password (stored in encrypted form)
  • Preferred language and notation preferences

Content Data

  • Bridge boards, bidding sequences, descriptions, and solutions you create
  • Creation and modification dates, board settings (dealer, vulnerability, level, theme)

Technical Data

  • Authentication cookies (essential for service functionality)
  • Audience and usage measurement data collected via PostHog (pages viewed, product actions, device, country). Without your consent this measurement runs in cookieless mode: no identifier is stored on your device and no persistent profile is built.
  • With your consent only: a recording of your navigation within the service (pages, clicks, scrolling), used to identify what obstructs use of the editor. Password fields are masked. No recording takes place if you decline or have not yet answered.
  • Server logs including IP addresses, browser type, access times, and pages visited

Legal Basis for Processing

  • Contract Performance: Processing your account information and content is necessary to provide the service you requested
  • Legitimate Interests: We process technical and cookieless audience measurement data for security, fraud prevention and service improvement, based on our legitimate interests. This measurement stores nothing on your device and builds no persistent profile of you.
  • Consent: Cookies and session recording are used only if you accept them via the banner shown on your first visit. Declining, or not answering, changes nothing about your use of the service. You may change your mind at any time via the "Cookies" link in the footer.

Purposes of Data Processing

  • Providing and managing your user account
  • Enabling you to create, edit, store, and export bridge boards
  • Sending transactional emails (password reset, email verification)
  • Analysing use of the service in order to improve it and develop new features, including — subject to your consent — by reviewing session recordings
  • Ensuring security and preventing abuse

Content, Analytics and Artificial Intelligence

Beyond providing the service, Bridge Boards may process the content you submit and your usage data for the following purposes:

  • providing, operating and securing the service;
  • measuring and analysing use of the service in order to improve it;
  • designing and developing new features and new products;
  • carrying out analyses and statistics and building datasets, aggregated or pseudonymised where possible;
  • developing, training, evaluating and improving algorithmic systems and artificial intelligence models, where applicable.

A bridge deal is not, in itself, personal data. The processing described above falls under the GDPR only insofar as it concerns data that identifies you directly or indirectly: your account, your author identifier, your usage data, or identifying elements you may have entered into a free-text field.

This processing relies on performance of the contract for what is strictly necessary to provide the service, and on our legitimate interest in measuring, improving and developing the service for the other purposes. Where processing relies on legitimate interest, you have a right to object, described in the "Your Rights" section.

Content Licence and Personal Data: Two Distinct Regimes

The rights you grant Bridge Boards over the content you submit are a matter of intellectual property law: they are described in section 4 of the Terms of Service and are independent of this policy.

The processing of your personal data, by contrast, falls under the GDPR and is described in this policy. Granting the content licence involves no waiver of your GDPR rights, which remain fully exercisable. Conversely, exercising your GDPR rights — deleting your account, for example — concerns your personal data and affects the content licence only as provided in section 4.10 of the Terms of Service.

Data Retention

We retain your personal data as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

  • Account information: Retained while account is active
  • Inactive accounts: Automatically deleted after 3 years of inactivity
  • Session recordings: Retained for 1 month maximum, then automatically deleted
  • Server logs: Retained for 12 months maximum for security purposes

Data Sharing and Third Parties

We do not sell your personal data. We may share data with the following service providers acting as data processors:

  • Hosting provider: For server infrastructure and data storage
  • PostHog: audience measurement, product analytics and, subject to your consent, session recording
  • Email service provider: For sending transactional emails (password reset, verification)

Cookies

Essential Cookies

We use essential authentication cookies to maintain your logged-in session. These cookies are necessary for the service to function and cannot be disabled.

Improvement Cookies

The only non-essential cookies we use serve to improve the service: understanding how the editor is used and where it gets in your way. They are placed by our audience measurement tool (PostHog) and only if you accept them. We use no advertising cookies, we do not track you across other websites, and we neither sell nor share your data for commercial purposes.

If You Decline

If you decline, or as long as you have not answered, PostHog switches to cookieless mode: it writes nothing to your device, neither cookie nor local storage, produces only aggregated statistics, and records no session. The service works in exactly the same way. Only the record of your choice is kept, in your browser’s local storage, so that we do not ask you again.

Changing Your Choice

You may accept or decline at any time via the "Cookies" link in the footer of every page. Withdrawal takes effect immediately and is as simple as giving consent.

Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of all personal data we hold about you
  • Right to Rectification: Correct inaccurate or incomplete personal data
  • Right to Erasure: Request deletion of your account and all associated data
  • Right to Data Portability: Receive your data in a structured, machine-readable format (via export features)
  • Right to Object: Object at any time to processing based on our legitimate interests, including cookieless audience measurement
  • Right to Withdraw Consent: Withdraw your consent to cookies and session recording at any time via the "Cookies" link in the footer, without affecting the lawfulness of processing carried out beforehand

To exercise any of these rights, please contact us using the information provided in the Legal Notice or manage settings from your account preferences.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. This includes encryption of passwords, secure HTTPS connections, and regular security updates.

International Data Transfers

Our application and database servers, as well as our audience measurement tool (PostHog), are located in the European Union. Some sub-processors may nevertheless process data outside the European Economic Area; in that case, we ensure appropriate safeguards within the meaning of Chapter V of the GDPR are in place (adequacy decision or standard contractual clauses).

Minors

Bridge Boards is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform. The "Last updated" date at the top indicates when this policy was last revised.

Contact and Complaints

For any question regarding this Privacy Policy or to exercise your rights, write to us at contact@romaricguth.com. If you believe your rights are not being respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French supervisory authority, or with the data protection authority of your country of residence.