PRIVACY
POLICY

Bordio is an independent web-browser gaming platform operated from London, United Kingdom.

Bordio is currently operated by Louis Lombardi, a sole trader trading as Bordio.

Contact: bordiogames@gmail.com

Bordio does not sell your personal information. We do not sell, rent or trade user information to advertisers, data brokers or other companies.

Where we use third-party services, we only provide information that is reasonably necessary for those services to operate Bordio on our behalf. This may include providers used for things such as:

• Website and server hosting.
• Analytics.
• Application logging and monitoring.
• Payments.
• Email delivery.
• Security and fraud prevention.
• Age or identity verification where required.

These providers do not receive your information so that they can sell it or use it for their own advertising purposes.

Depending on how you use Bordio, we may collect information including:

• Your email address.
• Your username and profile information.
• Account settings.
• Friends and favourites.
• Game saves, statistics and progression.
• Multiplayer and lobby information.
• Virtual items and Bord Coins.
• Purchase and subscription records.
• Messages or reports submitted through Bordio.
• IP address, browser and device information.
• Security and login information.
• Application logs.
• Information about how Bordio and our games are used.

You can play many Bordio games without creating an account. If you play without an account, we generally collect only the technical, security and analytics information necessary to operate, protect and improve the platform.

Bordio does not store passwords as readable plain text. Passwords handled directly by Bordio are protected using secure password-hashing techniques.

Bordio will never contact you asking you to send us your password, authentication code or other login credentials. We will also never ask you to reply to an email or message with your account email address as a way of proving ownership of your account.

If we need you to take action regarding your account, we will direct you through an appropriate Bordio account or support process.

If somebody contacts you claiming to represent Bordio and asks for your password or login credentials, do not provide them. Report suspicious messages to bordiogames@gmail.com

We use analytics and application logging to understand how Bordio is being used and to help us improve the platform. This may include information about:

• Which games are played.
• Which features are used.
• Errors and crashes.
• Page performance.
• Browser and device types.
• General usage patterns.
• Technical problems.

We use this information to improve games, find bugs, monitor performance, prevent abuse and keep Bordio secure. We do not use analytics data to sell advertising profiles about our users.

We use two analytics services, and the cookie banner names both. Google Analytics (GA4) counts visits and tells us which pages and games people reach. PostHog tells us how the games are actually played, so we can find bugs and see where people get stuck or give up. Bordio and our games report into the same Google Analytics property and the same PostHog project, so a visit that starts on the site and continues in a game is one visit rather than two.

Neither of them runs until you accept. If you choose ESSENTIAL ONLY, or you leave the banner unanswered, neither Google Analytics nor PostHog is loaded at all — the scripts are never requested, no analytics cookies are set and nothing is sent anywhere. We do not load them and then ask them politely not to count.

Your answer is stored in a cookie named bordio_consent, and it covers bord-games.com together with our games on their own subdomains. Answering the banner here also answers it for shithead.bord-games.com, and answering it there also answers it here, so we only ask once.

To change your answer, delete the bordio_consent cookie in your browser settings. The banner will ask again the next time you load a Bordio page, and analytics stay off until you accept. If your browser blocks cookies, we treat that as no answer given, which also means analytics stay off.

One piece of analytics does not come from your browser at all. When a multiplayer lobby in Shithead closes, the game server records a single event: the room code, how long the room existed, the most players it ever held at once, how many games were played in it and why it ended. It exists because a lobby everybody walks away from is closed minutes later with nobody left connected to report it. That event holds no personal information and is not linked to you, your browser or any identifier we hold, so it is not something the cookie banner gates.

Where cookies or similar technologies require your consent, we ask for it before they load. The section below on cookies and local storage lists everything we store in your browser and why.

This is everything Bordio stores in your browser, and what each thing is for.

Essential — set whichever answer you give:

• bordio_consent — records your answer to the cookie banner. It is set whether you accept or refuse, because it is the record of a refusal: without it we would have to ask you again on every page. It holds one word, either "all" or "essential", and nothing about you. It is set on bord-games.com so our games read the same answer, and it lasts 180 days.

Analytics — set only once you choose ACCEPT ALL:

• Cookies named _ga and _ga_* — set by Google Analytics to count a visit and recognise a browser that has been here before. They are set on bord-games.com so that moving between the site and a game is not counted as two unrelated visits. They expire after two years.
• Cookies whose names start with ph_ — set by PostHog for the same purpose, holding an anonymous identifier for your browser. Also set on bord-games.com, and for the same reason. These expire after a year.

If you choose ESSENTIAL ONLY, none of the analytics cookies above are ever created, because the services that would set them are never loaded. None of them are advertising cookies — we do not run ads on Bordio.

Some things are kept in your browser and never sent to us. The arcade games on this site — Bordio Runner, Raccoon Runner and the runner hiding on our 404 page — save your high score, your run count and your recent scores in your browser’s local storage. That stays on the device you played on, we cannot see it, and it is not attached to any account. Clearing your browser storage deletes it.

You can delete any of this through your browser settings. Deleting bordio_consent means the banner will ask you again the next time you visit.

We use personal information where necessary to:

• Create and manage your account.
• Provide games and multiplayer features.
• Save progress and account preferences.
• Maintain friends, favourites and private lobbies.
• Provide purchases and subscriptions.
• Provide virtual items and Bord Coins.
• Provide customer support.
• Protect accounts and platform security.
• Investigate cheating, abuse and reports.
• Prevent fraud.
• Comply with legal obligations.
• Monitor and improve Bordio.

Depending on the circumstances, we process information because it is necessary to provide our services to you, because we have a legitimate interest in operating and protecting Bordio, because we have a legal obligation, or because you have given us consent.

Where you purchase something through Bordio, payments may be processed by a third-party payment provider.

Bordio does not intend to store complete debit or credit card details where those details are securely handled by the payment provider.

We may retain information about the transaction, such as what was purchased, the amount, date, payment status and transaction reference.

Some Bordio games or features may require age verification. Where verification is required, Bordio may use a specialist verification provider.

We will only request information that is reasonably necessary to perform the required check.

Where possible, we prefer verification systems that confirm the required result — such as whether somebody meets an age requirement — without Bordio retaining unnecessary identity information.

We keep personal information only for as long as reasonably necessary for the reason it was collected. Account information will normally be kept while your Bordio account remains active.

If you delete your account through Settings → Danger Zone, we will delete or anonymise information that we no longer need.

Some information may need to be retained for longer where necessary for:

• Financial and accounting records.
• Fraud prevention.
• Security.
• Resolving disputes.
• Enforcing bans.
• Protecting other users.
• Complying with legal obligations.

Application and security logs are retained only for as long as reasonably necessary for monitoring, security and troubleshooting.

Bordio accounts are not open yet. If you ask for early access, we store the details you enter on the signup form so we can send you a key when a wave opens. This is a waiting list, not an account — nothing is created for you until you redeem a key.

• Your email address.
• Your preferred username.
• Your country.
• The games you told us you are interested in.
• How often you told us you play games.

We do not ask for a password at this stage, and you should not send us one. You choose a password when you redeem your key and create a real account.

These details are held in a database hosted by Supabase, in the European Union. We use them only to contact you about early access. We delete the list once early access ends, or sooner if you ask us to.

To be removed from the waiting list at any time, email bordiogames@gmail.com.

We may share limited information with trusted companies that help us operate Bordio. Examples include hosting, analytics, logging, payment, security, communications and verification providers.

We may also disclose information where we are legally required to do so, including to law enforcement, regulators or courts.

If a service provider processes information outside the United Kingdom, we will use appropriate safeguards where required by data-protection law.

We do not sell your information.

Depending on the circumstances and applicable law, you may have the right to:

• Request a copy of personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your information.
• Restrict certain processing.
• Object to certain uses of your information.
• Withdraw consent where processing is based on consent.
• Request certain information in a portable format.

You can make a privacy request by contacting bordiogames@gmail.com. We may need to verify that you are the account holder before completing certain requests.

You may also have the right to make a complaint to the UK Information Commissioner’s Office.

We use reasonable technical and organisational measures designed to protect user information from unauthorised access, loss, alteration or disclosure.

However, no website, online game or internet service can guarantee absolute security.

You should use a strong, unique password for your Bordio account and should never share your account credentials with another person.

Bordio is currently in beta and our services will continue to develop. We may update this Privacy Policy as our platform, technology, legal obligations or use of information changes.

The latest version will always show the date it was last updated.

Where a change materially affects how we use personal information, we will provide appropriate notice where required.

If you have questions, concerns or requests relating to privacy or personal information, contact bordiogames@gmail.com

Bordio, London, United Kingdom.

Louis Lombardi, trading as Bordio.