Privacy Policy

Who we are

ShelfPick is operated by Pluto Night Labs Ltd, registered in England and Wales under company number 17485329. We are the controller of the personal information described in this policy.

ShelfPick is a general-audience board-game companion. Its App Store content rating is 4+, which describes the app's content. Creating an account is separately restricted to people aged 13 or over.

Information ShelfPick uses

Account and profile information

Your email address, password hash, display name, verification status, account identifier, preferences and optional BoardGameGeek username. ShelfPick does not store your password in readable form and does not collect your date of birth.

Your collection and activity

Games you mark as Owned or Want to Play, imported collection records, Picker criteria and recommendations, player profiles, rankings, comparisons, recorded plays, participant names, scores, dates, duration and any optional location you type. Please use a nickname or obtain permission before entering information about another person.

Game Night

ShelfPick can use selected players, group preferences and a shortlist to help a host choose a game. Phone and QR voting are not available in this release.

Security and operations

Verification and password-reset token hashes, pseudonymous abuse-prevention counters, request identifiers, request method, redacted request path, response status and duration. The app stores its sign-in credential securely on your device so you can stay signed in.

BoardGameGeek data

If you supply a BoardGameGeek username, ShelfPick requests that public collection from BoardGameGeek. Game details and cover images also come from BoardGameGeek. ShelfPick does not ask for or receive your BoardGameGeek password.

Why we use information

• To provide ShelfPick: create and secure your account; organise your collection; personalise recommendations; record plays; and provide the features you request. We rely on our contract with you, or steps taken at your request before entering that contract.
• To send service email: deliver account verification and password-reset messages. We rely on the same contractual basis. ShelfPick does not send marketing email through the app.
• To protect and operate the service: prevent abuse, diagnose failures, maintain security and understand whether core features work as intended. We rely on our legitimate interests in providing a secure, reliable and useful service, balanced against your rights.
• To handle rights requests and complaints: respond to you and keep records where reasonably needed. We rely on legal obligations and our legitimate interests in demonstrating and managing compliance.

Picker recommendations are automated suggestions based on your collection and the criteria you choose. They do not make decisions that have legal or similarly significant effects on you.

Service providers and international processing

We use a small number of providers to run ShelfPick:

• Render hosts the FastAPI service and PostgreSQL database in Frankfurt and retains Hobby dashboard application logs for seven days. Its infrastructure and subprocessors may process information outside the United Kingdom.
• Resend delivers verification and password-reset email. The sending route is configured for Ireland, while Resend states that email and log data on the Free plan is retained for 30 days and may be stored or processed in the United States.
• BoardGameGeek supplies public collection and game information and hosts cover images. Requests can disclose your IP address and ordinary browser or device information to BoardGameGeek and its delivery providers. BoardGameGeek is based in the United States.

These arrangements can involve transfers outside the United Kingdom. Render and Resend publish data-processing terms that describe UK transfer mechanisms, including a UK Addendum and the UK Extension to the EU–US Data Privacy Framework. We have not independently verified which mechanism applies to every transfer under our current account arrangements. BoardGameGeek's privacy policy states that information from outside the United States is transferred to the United States, but we have not verified a separate UK transfer safeguard for that processing. Contact us if you want more information about the provider terms we currently hold.

ShelfPick has no advertising SDK and does not sell personal information. Its client analytics and crash-reporting hooks are not connected to a third-party provider in this release.

How long we keep information

We keep account, collection, preference and activity information while your account remains open. We may retain limited information for longer where it is reasonably needed to meet a legal obligation, resolve a dispute or protect the service.

• Render dashboard application logs are available for seven days under the current plan.
• Resend states that email and log data on the current plan is retained for 30 days.
• Authentication abuse counters contain a keyed hash rather than the raw email or IP address. Rows older than 24 hours are removed when a later authentication write performs cleanup; there is no separate scheduled cleanup.
• Expired verification and reset token hashes are unusable, but there is no separate scheduled cleanup. They are removed when replaced or when the account is deleted.
• Production database point-in-time recovery covers a rolling three-day window. Deleted information may remain in recovery copies until that window expires and is used only for service recovery.

We review retention when the service or provider arrangements change. We do not promise an automated inactivity-deletion schedule that the service does not currently operate.

Your choices and rights

You can update your profile and preferences in ShelfPick. You can delete your account from Settings → Profile after confirming your password. Deletion removes your account and the ShelfPick records owned by it from the live database, including your collection, players, plays, recommendations and hosted sessions. Shared game-catalogue records remain. Recovery copies age out under the period described above.

Depending on the circumstances, you may ask us to give you a copy of your information, correct it, erase it, restrict how it is used, transfer information you provided, or consider an objection. These rights are not absolute and exemptions may apply. We normally respond within one month, subject to any extension permitted by law.

To make a request, email hello@plutonightlabs.com. We may need to verify that you control the relevant account, but we will never ask you to send your password.

Age and children's privacy

You must be at least 13 to create a ShelfPick account. Registration asks you to confirm this; we do not collect a date of birth or use an external age-verification service. If you are under 13, do not create an account.

People under 18 have data-protection rights. If you believe a child has created an account or that we hold a child's information inappropriately, contact us so we can investigate and take appropriate action.

Contact, complaints and changes

For a privacy question or request, contact hello@plutonightlabs.com. To make a data-protection complaint, use the subject “ShelfPick data protection complaint” and explain what happened and what you would like us to consider. We will acknowledge the complaint, investigate it fairly, keep you informed and explain the outcome.

If you remain unhappy, you can complain to the Information Commissioner's Office, the UK data-protection regulator.

We may update this policy when ShelfPick, the law or our providers change. We will update the date above and provide additional notice where a change materially affects how we use your information.