#1. Who we are
Lambooij Software, a sole trader (eenmanszaak) registered in the Netherlands with the Chamber of Commerce under number 53937627, at Balistraat 32, 3531PX, Utrecht, The Netherlands, trading as OpenGammon and HedgeHog. We are the controller of the data described here.
Questions, or any request about your data: hello@hedgehog-bg.com. We have not appointed a Data Protection Officer; at this size and for this processing we do not believe one is required.
#2. What we collect
- Account - your email address, a hashed password, your plan, whether your email is verified, and whether you asked us to send product news (and when you asked).
- Your content - the matches, positions, studies and notes you create or upload, and the analyses we produce from them.
- Payment - on the website, handled by Stripe: we store your Stripe customer and subscription identifiers and your billing country. In the iOS app, handled by Apple: we store the App Store transaction identifier of your subscription, which product it is, its status, when it renews or expires and whether it will renew. We never see your card details, and Apple does not tell us who you are on its side.
- Guest passes - if you issue a guest pass or redeem one, we record the code, which account issued it, which account redeemed it, when, and whether it earned the issuer anything. Those two accounts are the whole of what we keep about who invited whom: there is no tracking code, no referral link, and nothing stored in your browser.
- Connected apps - if you let another application use HedgeHog on your behalf, which applications you connected, what you allowed each to do, when, how much it submitted, and which of your matches it sent.
- Technical - server logs, and your IP address for rate limiting and abuse prevention. We count how many analyses you have run, so we can apply the free allowance and the fair-use guideline.
Analysis your browser runs locally, and anything stored on your device (saved settings, study trees, drafts), stays on your device and never reaches us.
#3. Why we use it, and our legal basis
| What for | Basis |
|---|---|
| Running your account and the service you paid for | Performance of a contract |
| Taking payment, tax and accounting records | Contract, and legal obligation |
| Checking your email is real at signup, rate limiting, abuse prevention, usage counting | Legitimate interests |
| Training or evaluating our models on your content | Consent (opt-in only) |
| Sending you product news, new engine announcements and offers | Consent (opt-in only) |
| Sending service email about your account and the analyses you asked for | Performance of a contract |
| Publishing the results of a tournament its director chose to share, players' names and error rates included | Legitimate interests (the director's and the players' in an event's results being known) |
| Mailing a player their results once, at an address the tournament's director gave us | Legitimate interests, on the director's confirmation that the player agreed to receive them |
#4. We do not train on your data unless you opt in
We do not use your matches or positions to train or evaluate our backgammon models unless you have explicitly turned that on. It is off by default, agreeing to the Terms is not consent, and you can withdraw at any time, which stops any future use, though it cannot un-train a model already built.
Board photos are opt-in too, asked once per account. To use board-from-a-photo you agree that the photos you upload there are kept in full and used to train and test our board reader. Location and camera details are removed from each photo before it is stored. You can delete any photo yourself, and you can withdraw the agreement in your profile; after that we take no new photo and no stored photo of yours goes into training again. Deleting reaches our own copy only: a training copy we already took is purged when it is next updated, and a reader already trained on a photo cannot forget it. Your photos are deleted with your account.
#5. Email, and what counts as marketing
Service email is part of the account. Verifying your address, resetting your password, telling you an analysis you submitted has finished, telling you a plan was granted or a payment failed, telling you a guest pass of yours was used or is about to expire, and warning you before we delete an inactive account: we send these because you have an account, and you cannot turn them off without closing it. You can switch off the analysis-complete mail per submission.
Everything else needs your consent, and that includes a newsletter. Product news, new engine and feature announcements, tips, and offers are marketing, even when the news is interesting and nothing is being sold in the message. We send none of it unless you ticked the box at registration or turned the switch on in Settings. It is off by default, agreeing to the Terms is not consent, and you can withdraw at any time, in Settings or by the unsubscribe link in every such email. Withdrawal takes effect for anything we have not already sent.
We do not put promotions inside service email, because that would make an email you cannot switch off into one you never agreed to.
#6. Who else sees it
| Who | What they get | Where |
|---|---|---|
| Stripe | Email, subscription and billing details, for payments and VAT, when you subscribe on the website | EU/US |
| Apple | Your purchase, when you subscribe in the iOS app. Apple collects the payment and billing details itself, under its own privacy policy | EU/US |
| Resend | Emails we send you, including their contents | US |
| NeverBounce | Your email address at signup, to check it is deliverable | US |
| Hetzner | Hosts the servers and database | EU |
We do not sell your data and do not share it for advertising. We will disclose data if the law requires it.
A connected app sees only what you allowed, and only once you allowed it. Another application (a study tool, say) can ask to use HedgeHog on your behalf, and you choose on a HedgeHog page whether to let it. It never gets your password. With your permission it receives your HedgeHog user id, your username, what your plan lets it offer you and how much of your allowance is left, and the analyses of the matches and positions it sent us itself; it cannot read the rest of your library. What it does with that is governed by its own privacy policy, not this one. Disconnect it in Settings and its access ends at once; changing your password disconnects every app. When we show you the connection screen we fetch the application's name and logo from its own website ourselves, so it does not learn your IP address from your visit.
If you make a match public or broadcast it, anyone with the link can see it, including people who are not signed in. That is the point of the feature, and it is your choice.
Tournament results name people who may have no account with us. A tournament director can upload an event's matches and share its results page, by link or published on our site, where search engines can find it. That page shows each player's name as it appears in the match files, their results and, unless the director switches it off, their error rate in every match. It never shows an email address. Whether to share the results, and what they show, is the director's choice. If you played in an event and do not want to be named, ask its director, or write to us at hello@hedgehog-bg.com and we will do it ourselves: you are then shown as a numbered player everywhere the results are shared, your results stay in the standings, and the matches you played can no longer be opened or downloaded from the shared page, since your name is in those files. You can also ask us to remove your results altogether.
A tournament director may give us your email address. A director can enter the address of a player in their event, after confirming that the player agreed to receive their results from us; we record who confirmed and when. We use that address for one thing: one email with your results in that event and a link to your own results page. It is never shown on a results page, in a download or to anyone but that director. We keep one record of the address across every event it was given for. Nothing else is sent to it unless you ask for HedgeHog news yourself, on your results page; the director's confirmation does not cover anything further. Every results email has a link that stops tournament results email to your address; we then keep the address only to remember that you said no, so that another director cannot mail it again. Otherwise the record is deleted once no event holds it any more.
If you have an account, or later make one, whose email we have verified as that address, your results in the event are linked to your account and shown under My tournaments; you can also link them yourself from your results page. A link lets you open your own matches in that event, and nothing else of the director's. An address the director typed links nothing on its own. You can unlink any event, and deleting your account unlinks every one and erases the record of your address; the director keeps your results in their event, as they had them before you joined.
A guest pass names nobody to either side. If a pass you gave away is redeemed we tell you that it was used, and never who used it. If you redeem one we tell you your month is active, and never who issued it. Neither of you learns anything about the other from us that you did not already know from handing the code over. We can see both accounts ourselves, for support and to stop the passes being abused, which is what the record is for.
#7. How long we keep it
We keep your data while your account is active.
You can delete your account yourself, at any time, in Settings on the website or in the app. It takes effect at once: your account, your matches, analyses, studies, notes, broadcasts, board photos and connected apps are deleted immediately, and a website subscription is cancelled. Deleting your account does not cancel a subscription bought through the App Store; Apple bills that, and only you can cancel it there. If you would rather we did it, ask us and we will delete your account within 30 days.
If we close your account, you have 90 days to export your matches, after which we delete them. A guest pass you were issued is deleted with your account. A pass you redeemed stays on its issuer's record as used, with your account removed from it. The record of an app you connected, disconnected ones included, is kept with your account and deleted with it. Free accounts unused for 12 months are deleted, and we will email you first. Payment and tax records are kept for as long as Dutch law requires, and Stripe and Apple keep their own records of what you paid under their own policies.
#8. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent you have given. Email hello@hedgehog-bg.com and we will respond within a month.
You can object to direct marketing at any time and we must stop: there is nothing to weigh up on our side. The switch in Settings and the unsubscribe link do the same thing without having to write to us.
We do not make automated decisions about you that have legal or similarly significant effects. Analysis tells you about a backgammon position; it is not a decision about you.
#9. Cookies and tracking
We set no cookies, and we run no analytics, advertising or tracking of any kind. Signing in stores a token in your browser's local storage, which is what keeps you signed in.
The one exception: if you attach a YouTube video to a broadcast, YouTube's player is loaded from YouTube and may set its own cookies. That is YouTube's processing, under Google's privacy policy.
#10. Children
HedgeHog is not for under-16s and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.
#11. Changes, and complaining
If we change this policy materially we will give 30 days' notice by email or in the app.
If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the authority in your own country.
Contact: hello@hedgehog-bg.com Controller: Lambooij Software, KvK 53937627, the Netherlands