Privacy Policy
Last updated: 28 August 2026
This notice explains what personal data hobbli.eu collects, why, on what legal basis, how long it is kept, and what rights you have. It complements our Cookie Policy, which covers cookies in detail.
1. Who is responsible for your data
The data controller is Fabien Le Thuaut, France. You can reach us at privacy@hobbli.eu for anything in this notice, including to exercise your rights.
2. The short version
Hobbli is a content site. There are no accounts, no sign-up, no newsletter and no contact form. We do not sell anything directly and we do not sell or rent your data to anyone. The only personal data we process is anonymous-by-default analytics, and only if you consent.
3. What we collect, why, and on what basis
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Your cookie consent choice | To remember what you agreed to, so we don’t ask again on every page. | Legal obligation: we must be able to evidence consent. | 12 months |
| Analytics data: pages viewed, approximate location (country/city level, derived from a truncated IP), device and browser type, referring site | To understand which pages are useful and improve the site. | Consent (GDPR Art. 6(1)(a)), collected only if you accept analytics in the cookie banner. | Up to 14 months |
| Session recordings: your on-screen interactions (clicks, scrolls, pages visited), used to reconstruct a replay of your visit | To see how people actually use the site and find points of friction. | Consent (GDPR Art. 6(1)(a)), collected only if you accept analytics in the cookie banner. | Up to 12 months |
| Server/security logs (IP address, request time, user agent) | Kept by our host to deliver the site and defend against abuse and attacks. | Legitimate interests (Art. 6(1)(f)): keeping the site available and secure. | Short-term, per our host’s policy |
| Emails you send us | To answer you. | Legitimate interests (Art. 6(1)(f)): responding to your enquiry. | As long as needed to handle the request |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects, and we do not knowingly collect data from children.
4. Who else is involved
We rely on a small number of providers, acting as our processors or as independent controllers:
- Vercel: hosting and delivery of the site, including server logs.
- Google (Google Tag Manager and Google Analytics 4): audience measurement, only after you consent. See Google’s Privacy Policy.
- Amplitude: audience measurement and session replay (a recording of how you interact with the site), only after you consent. See Amplitude’s Privacy Policy.
- Supabase: stores the board game catalogue itself. It holds no personal data about visitors.
We do not sell your personal data, and we do not share it with anyone for their own marketing.
5. Transfers outside the EEA
Some of these providers may process data outside the European Economic Area, including in the United States. Where that happens, the transfer is covered by appropriate safeguards, typically the European Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
6. Links to retailers
Hobbli links out to third-party retailers so you can compare and buy games. Once you follow such a link you are on their site, governed by their privacy policy: we have no control over, and no responsibility for, what they collect. Some of these are affiliate links, meaning we may earn a commission on a purchase at no extra cost to you. Following a link does not send them your personal data from us.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent at any time, use the Cookie settings link at the bottom of any page. Withdrawing does not affect processing carried out before you withdrew.
To exercise any of these, email privacy@hobbli.eu. We will reply within one month. If you are unhappy with how we handle it, you may complain to your national data protection authority, in France, the CNIL.
8. Changes to this notice
We may update this notice as the site evolves. The “last updated” date above always reflects the current version, and significant changes may be signalled through the consent banner.
9. Contact
Fabien Le Thuaut, France: privacy@hobbli.eu