1. Data controller
Manuel Couto Pintos, an individual with tax ID 77462284D and address at Campo da Vila 21, Cambados (Pontevedra), Galicia (Spain). Contact: motu@bored-dot.net.
2. Our principle: your data on your device
bored is designed to be local first. The interest profiles and computations that describe you (vectors, affinities) happen on your own device and are not sent to any server without your explicit consent. The architecture is decentralized (P2P): most communications are direct between people.
3. What data we process and on what legal basis
a) Essential — performance of the contract
To make the app work we process the bare minimum: your email for authentication and technical data to bootstrap the P2P network (peer discovery). Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Without this the Service cannot be provided.
b) Game data categories — granular consent
Some features may mine data categories to improve matching. They are off by default and require your category-specific consent (Art. 6(1)(a)), revocable at any time:
- Personality
- Mood
- Interests
- Values (special category — Art. 9)
- Finance (special category — Art. 9)
Special categories (values/finance) receive reinforced treatment and are never processed without explicit consent. We do not condition use of the app on accepting these categories.
c) Waitlist — consent
If you join the waitlist, we process your email and, optionally, your province, solely to notify you about the launch. Legal basis: consent (Art. 6(1)(a)).
d) Website analytics — consent
On this site we use Google Analytics 4 with Consent Mode: by default no storage is enabled and we only measure after you accept in the cookie banner. It helps us understand the acquisition funnel and improve the site.
4. Processors and third parties
- Supabase — authentication, P2P bootstrap and provisional storage.
- Cloudflare — hosting and distribution of the site and infrastructure.
- Google — website analytics (only with consent).
- Cloudflare Realtime (TURN) — relaying voice/video calls when no direct connection is possible (connection metadata only; content is end-to-end encrypted).
- Our own analytics infrastructure (data lake) — data you consent to may be sent pseudonymized to our own infrastructure for aggregate analytics; it is never sold or linked to your identity.
5. International transfers
Some providers may process data outside the EEA. In that case they rely on valid mechanisms (the European Commission's standard contractual clauses or adequacy decisions).
6. Retention
Much of the content is ephemeral. Account data is kept while your account is active; waitlist data until launch or until you ask to be removed.
7. Your rights
You may exercise your rights of access, rectification, erasure (“right to be forgotten”), objection, restriction and portability, and withdraw consent at any time, by writing to motu@bored-dot.net. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), aepd.es.
8. Cookies
We only use analytics cookies/storage after your acceptance. You can change your decision by clearing the site data in your browser.
9. Changes
This policy is versioned. We will notify you of any relevant change through the website or the app.