Privacy Policy

Effective: October 12, 2026. UnBored hasn’t been released yet, and this policy may change before it is. We’ll always post changes here first.

1. Who we are

UnBored is a party board game played on a shared screen with phones as controllers. In this policy, “UnBored”, “we” and “us” means Axiom Design Group, 5213 N Kings Hwy, Myrtle Beach, SC 29577, the business responsible for the game, this website (getunbored.com) and our online service (play.getunbored.com).

Privacy questions and requests: hello@getunbored.com.

2. The short version

  • You don’t need an account to play. Guests can play every game without giving us any personal information.
  • Accounts are for people aged 13 and over. If you’re younger, you can always play as a guest.
  • If you make an account, we keep only what’s needed to sign you in and save your characters: your email address or Steam ID, a display name, and your characters.
  • We don’t sell or share your personal information, we don’t show ads, and we don’t use analytics or tracking in the game or on this website.
  • You can delete your account yourself at any time, and it’s removed immediately.

3. What we collect, and why

3.1 Playing as a guest

To play, you open the controller page on your phone and pick a name and a character. Depending on how you play:

  • Home play (game running on your own PC). Your name, character, answers, drawings and votes go between your phone and that PC over your own Wi-Fi. They don’t come to us.
  • Online rooms at play.getunbored.com. While a room is open, our server holds the same match information so the room can run: each player’s display name, character, seat, team and connection status, plus anything submitted in mini-games (text answers, drawings and votes). This is deleted when the room closes. Characters used in online rooms are kept in a cache for up to 30 days so returning players can pick them quickly, and each host sees only the characters used in their own room.

Whichever way you play, the PC running the game keeps save files on that PC (player names, scores and in-progress answers) so a match can resume after a crash. They stay on that PC and aren’t sent to us.

Player names and drawings appear only inside the match you’re playing. There is no public chat, public profile or public matchmaking.

3.2 Creating an account (optional)

What Why How long
Email address (if you sign in by email) To send your sign-in codes and identify your account Until you delete your account
Steam ID (if you sign in with Steam) To identify your account. We only receive your public Steam ID, never your Steam password or other details Until you delete your account
Display name and up to four characters (name, look, outfit and accessories) To save your characters and use them in games Until you delete them or your account
Sign-in codes To check that you own the email address. Stored only as a one-way hash 10 minutes
Sign-in sessions To keep you signed in. Stored only as a one-way hash Up to 30 days, or until you sign out
Security records (for example “signed in” or “display name changed”, with the time) To protect your account and investigate misuse 12 months

Age check. When you create an account we ask for your month and year of birth, only to confirm that you’re 13 or older. We don’t store your birth date; we only record that the check was passed.

3.3 Security and abuse prevention

Our servers use your network (IP) address to limit abuse, for example to cap how many rooms or sign-in emails one connection can create. In the game service this happens in memory and isn’t written to our databases. To stop automated sign-ups we may use Cloudflare Turnstile on sign-in forms. It checks that a real person is using the page and is described in section 5.

3.4 What your phone stores

The controller saves these in your browser’s storage on your own device, so you can rejoin quickly:

  • your session (room, player ID and a random reconnect token) and your last room code;
  • your display name and your character profiles, each with a random secret that proves the character is yours;
  • preferences such as vibration, button layout and whether you’ve added the app to your home screen;
  • if you’re signed in, your sign-in session and your last-used character;
  • for the current tab only, an answer you’re still typing or drawing, so it survives a reload.

The controller sets no cookies. You can remove all of this by signing out and clearing the site data for play.getunbored.com in your browser.

3.5 Camera and microphone

  • Camera: only if you use the in-app QR scanner to join a room. The image is read on your phone and is never sent anywhere.
  • Microphone: one mini-game offers optional voice input through your browser’s built-in speech recognition. Depending on your browser, the provider (for example Apple or Google) may process that audio under its own privacy policy. You can always type instead, and the host can turn voice input off.

3.6 This website

  • Contact form: we use your name, email address, topic and message to reply to you. We keep messages for up to 12 months, then delete them.
  • Server logs: like any web server, ours records standard access logs (IP address, page requested, browser type and time) for security and troubleshooting. Our host keeps them for up to about two months.
  • Cookies: this website sets cookies only for people who log in to manage it. It has no advertising, analytics or social-media trackers.

4. Legal bases (UK and EU visitors)

  • Contract: running your account and the rooms you play in.
  • Legitimate interests: keeping the service secure and preventing abuse (rate limits, security records, server logs), and answering messages you send us.
  • Legal obligation: where we have to keep or disclose information by law.

5. Who else handles your information

We use a small number of service providers. They may use your information only to provide their service to us:

  • InMotion Hosting (United States): hosts our servers, databases and this website.
  • Resend (United States): delivers sign-in code emails.
  • Valve / Steam: only if you choose “Sign in with Steam”; Steam confirms your Steam ID to us.
  • Cloudflare (Turnstile), if enabled: checks that sign-ins come from people, not bots.

We may also disclose information if the law requires it, or to protect the safety of players or the service. If UnBored is ever sold or merged, this policy would continue to apply to the information we hold, and we’d tell you before it changed.

6. Where your information is stored

Our servers are in the United States. If you’re outside the US, your information is transferred there. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.

7. How we protect it

All traffic uses HTTPS. Sign-in codes and sessions are stored only as one-way hashes, and accounts are passwordless, so there are no passwords for us to lose. Every request is checked on the server, so one player can never read or change another player’s account, characters or room. Access to our servers is restricted, and we regularly review the service for security issues. No system is perfectly secure; if a breach affected your information, we’d tell you and the relevant authorities as the law requires.

8. Children

UnBored is a party game that families can play together, but accounts are only for people aged 13 and over. We check age when an account is created and don’t allow younger players to register. Younger players can play as guests, which doesn’t require any personal information.

We don’t knowingly collect personal information from children under 13. If you believe a child under 13 has created an account or sent us their information, email hello@getunbored.com and we’ll delete it promptly.

9. Your rights and choices

  • Delete your account: sign in at play.getunbored.com/me, open Delete account and type DELETE to confirm. Your email address, Steam ID, characters and sessions are deleted immediately. We keep only an anonymous placeholder with no email, Steam ID or name, plus the security records from section 3.2, which are deleted after 12 months.
  • See, correct or export your data: you can view and change your display name and characters on the same page, or email us for a copy of everything we hold about you.
  • Clear your phone: sign out and clear the site data for play.getunbored.com.

Depending on where you live (for example the UK, the EU or California), you may have further rights: to access, correct, delete or receive a copy of your data, to object to or restrict how we use it, and not to be treated differently for using these rights. To use any of them, email hello@getunbored.com. We’ll reply within 30 days and may need to confirm that the account is yours first. If you’re in the UK or EU, you can also complain to your local data protection authority.

California: we don’t sell or share personal information, and we don’t use it for targeted advertising. Because we don’t track you, there’s nothing for “Do Not Track” or Global Privacy Control signals to switch off, but we respect them all the same.

10. Changes to this policy

We’ll post any changes on this page and update the date at the top. If a change materially affects how we use information you’ve already given us, we’ll tell signed-in players before it takes effect.

11. Contact

Axiom Design Group
5213 N Kings Hwy, Myrtle Beach, SC 29577
Email: hello@getunbored.com

Back To Top