#1. Who we are
Lambooij Software, a sole trader (eenmanszaak) registered in the Netherlands with the Chamber of Commerce under number 53937627, at Balistraat 32, 3531PX, Utrecht, The Netherlands, trading as OpenGammon and HedgeHog. We are the controller of the data described here.
Questions, or any request about your data: hello@hedgehog-bg.com. We have not appointed a Data Protection Officer; at this size and for this processing we do not believe one is required.
#2. What we collect
- Account - your email address, a hashed password, your plan, whether your email is verified, and whether you asked us to send product news (and when you asked).
- Your content - the matches, positions, studies and notes you create or upload, and the analyses we produce from them.
- Payment - handled by Stripe. We store your Stripe customer and subscription identifiers and your billing country. We never see your card details.
- Guest passes - if you issue a guest pass or redeem one, we record the code, which account issued it, which account redeemed it, when, and whether it earned the issuer anything. Those two accounts are the whole of what we keep about who invited whom: there is no tracking code, no referral link, and nothing stored in your browser.
- Connected apps - if you let another application use HedgeHog on your behalf, which applications you connected, what you allowed each to do, when, how much it submitted, and which of your matches it sent.
- Technical - server logs, and your IP address for rate limiting and abuse prevention. We count how many analyses you have run, so we can apply the free allowance and the fair-use guideline.
Analysis your browser runs locally, and anything stored on your device (saved settings, study trees, drafts), stays on your device and never reaches us.
#3. Why we use it, and our legal basis
| What for | Basis |
|---|---|
| Running your account and the service you paid for | Performance of a contract |
| Taking payment, tax and accounting records | Contract, and legal obligation |
| Checking your email is real at signup, rate limiting, abuse prevention, usage counting | Legitimate interests |
| Training or evaluating our models on your content | Consent (opt-in only) |
| Sending you product news, new engine announcements and offers | Consent (opt-in only) |
| Sending service email about your account and the analyses you asked for | Performance of a contract |
#4. We do not train on your data unless you opt in
We do not use your matches or positions to train or evaluate our backgammon models unless you have explicitly turned that on. It is off by default, agreeing to the Terms is not consent, and you can withdraw at any time, which stops any future use, though it cannot un-train a model already built.
#5. Email, and what counts as marketing
Service email is part of the account. Verifying your address, resetting your password, telling you an analysis you submitted has finished, telling you a plan was granted or a payment failed, telling you a guest pass of yours was used or is about to expire, and warning you before we delete an inactive account: we send these because you have an account, and you cannot turn them off without closing it. You can switch off the analysis-complete mail per submission.
Everything else needs your consent, and that includes a newsletter. Product news, new engine and feature announcements, tips, and offers are marketing, even when the news is interesting and nothing is being sold in the message. We send none of it unless you ticked the box at registration or turned the switch on in Settings. It is off by default, agreeing to the Terms is not consent, and you can withdraw at any time, in Settings or by the unsubscribe link in every such email. Withdrawal takes effect for anything we have not already sent.
We do not put promotions inside service email, because that would make an email you cannot switch off into one you never agreed to.
#6. Who else sees it
| Who | What they get | Where |
|---|---|---|
| Stripe | Email, subscription and billing details, for payments and VAT | EU/US |
| Resend | Emails we send you, including their contents | US |
| NeverBounce | Your email address at signup, to check it is deliverable | US |
| Hetzner | Hosts the servers and database | EU |
We do not sell your data and do not share it for advertising. We will disclose data if the law requires it.
A connected app sees only what you allowed, and only once you allowed it. Another application (a study tool, say) can ask to use HedgeHog on your behalf, and you choose on a HedgeHog page whether to let it. It never gets your password. With your permission it receives your HedgeHog user id, your username, what your plan lets it offer you and how much of your allowance is left, and the analyses of the matches and positions it sent us itself; it cannot read the rest of your library. What it does with that is governed by its own privacy policy, not this one. Disconnect it in Settings and its access ends at once; changing your password disconnects every app. When we show you the connection screen we fetch the application's name and logo from its own website ourselves, so it does not learn your IP address from your visit.
If you make a match public or broadcast it, anyone with the link can see it, including people who are not signed in. That is the point of the feature, and it is your choice.
A guest pass names nobody to either side. If a pass you gave away is redeemed we tell you that it was used, and never who used it. If you redeem one we tell you your month is active, and never who issued it. Neither of you learns anything about the other from us that you did not already know from handing the code over. We can see both accounts ourselves, for support and to stop the passes being abused, which is what the record is for.
#7. How long we keep it
We keep your data while your account is active. When it closes you have 90 days to export your matches, after which we delete them. Ask us to delete sooner and we will do so within 30 days. A guest pass record is kept for as long as the two accounts it links, and goes when either of them is deleted. The record of an app you connected, disconnected ones included, is kept with your account and deleted with it. Free accounts unused for 12 months are deleted, and we will email you first. Tax records are kept for as long as Dutch law requires.
#8. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent you have given. Email hello@hedgehog-bg.com and we will respond within a month.
You can object to direct marketing at any time and we must stop: there is nothing to weigh up on our side. The switch in Settings and the unsubscribe link do the same thing without having to write to us.
We do not make automated decisions about you that have legal or similarly significant effects. Analysis tells you about a backgammon position; it is not a decision about you.
#9. Cookies and tracking
We set no cookies, and we run no analytics, advertising or tracking of any kind. Signing in stores a token in your browser's local storage, which is what keeps you signed in.
The one exception: if you attach a YouTube video to a broadcast, YouTube's player is loaded from YouTube and may set its own cookies. That is YouTube's processing, under Google's privacy policy.
#10. Children
HedgeHog is not for under-16s and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.
#11. Changes, and complaining
If we change this policy materially we will give 30 days' notice by email or in the app.
If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the authority in your own country.
Contact: hello@hedgehog-bg.com Controller: Lambooij Software, KvK 53937627, the Netherlands