Privacy

Marquoir works without an account, and that’s the normal way: your players, game nights and games stay on your device. This page says exactly what leaves it, and when.

Updated on 11 November 2026.

Without an account

Players, game nights, games, rounds, wish lists, collection and settings are saved in your browser’s or the app’s storage, on the device. They are sent to no server. They disappear if you clear the site’s data or uninstall the app; the export in Settings lets you keep a copy.

Four exceptions, and only if you ask for them: a game you invite other people to follow, a game library you share with a code, a question you ask about the rules during a game, and a game you want to hear about when its rules are ready (see below).

Games shared without an account

When you tap “Invite others to follow” and then “Create the link” without being signed in, a copy of the game in progress is sent to the Marquoir server: the game name, its variants, the first names as you typed them, the scores of each round and the state of the game. Its only purpose is to let the follow link show the scores to the people you send it to; it is updated after every round. If a player has a name colour — your “Me” player, a player you lend one to, or someone who joined the table — it is sent too, so that their name appears in the same colour on the follow link. Your level, your marks and the rest of what you wear are never included. None of this is sent if “Show levels and rewards” is off on your device.

This copy is not linked to any account: no email address, IP address or device identifier is stored with it. Your device keeps a secret key, the only thing that can change it. It is deleted seven days after its last update, or immediately if you tap “Stop sharing”.

The same copy is sent from the “Who’s playing?” screen if you tap “Let the table join”: it then shows the game and the names already seated to those who scan the table’s QR code, or type its six-character code.

Collection shared with a code

When you tap “Share my game collection” then “Create my code”, the list of your boxes is sent to Marquoir’s server: the nickname you choose and, for each game, its name. No games played, no box photos, no loans, no email address. Anyone with the eight-character code can see this list; it is not indexed, and it is updated whenever your collection changes.

This copy is never linked to an IP address. Without an account, it is not linked to any account: your device keeps a secret key, the only one able to change it. If you share from your account, the copy is linked to it, so you find your code again on your other devices, and it is deleted along with the account. “Change code” makes the old code unusable; “Stop sharing” deletes the copy immediately. The friends’ collections you keep stay on your device.

Public player card

Your player card (“Ma fiche”, on the “Me” page in Players, French version only) stays on your device, and its public page is off by default. With an account, and only if you have said you are 15 or older, you can turn it on: the card is then sent to the Marquoir server, and updated each time you open “Ma fiche”. Anyone with its address can see it; the address is made of twenty random characters that are practically impossible to guess. It is not indexed by search engines.

Only what the card shows is published: your first name or nickname and its colours, the frame, emblem and banner you wear, your title and level, your showcase, your favourite game, the number of seats and days of play of your usual table, and your numbers of games played, wins and different games. Never another player’s name, nor your age or year of birth, nor your email address. Without publishing it, we keep with your account the date of the last publication, when your device indicated 15 or older.

Turning the page on means you consent to it; turning it off withdraws that consent. Once off, the page shows nothing: the card is deleted from the server. Only its address, so you can find it again if you turn it back on, and the date of the last publication stay with your account. “Nouveau lien” (new link) replaces the address: the old one leads nowhere. Everything is deleted with your account.

Friends

“Friends” (next to My journey) lets you, with an account, a username and only if you have said you are 15 or older, find other members by their username and show each other your profiles. It stays closed if you have said, for open game nights, that you are under 16. Nothing is sent until you tap “Turn on Friends”; tapping it is how you consent to this upload. Your friend profile is then sent to the Marquoir server, and updated each time you open “Friends”.

This profile includes what your player card shows (described above), your trophies, the customisations you have unlocked and your last ten games: the game name (as you wrote it, for a home-made game), the day, your place, your score and the number of players. Never another player’s name, nor your age, nor your email address, nor your EXP or your marks. Only your friends see it: a friendship exists only once one of you has accepted the other’s request. We also keep the date of the last upload, when your device indicated 15 or older.

People find you by your exact username, with no directory or suggestions, as long as “Receive friend requests” is on: it is on by default, and you can turn it off. Someone who looks up your username sees the first name or nickname on your card and its colours, your frame, your title and your level; people with whom a request is pending see it too. Removing a friend or declining a request notifies no one. Blocking an account ends your friendship or your requests, and makes each of you impossible for the other to find. It is the same block as for open game nights: set here or there, it applies to both.

You can withdraw your consent at any time with “Leave Friends”: your friend profile, the date of its last upload, your friendships and your requests are deleted. Your blocks remain, on the basis of our legitimate interest in protecting members, until you lift them; “Friends” lets you do so even after leaving. Everything is also deleted with your account.

Rules assistant (“A question about the rules?”)

Purpose: answering your question about the rules of the game you are playing.
Data: your question, together with the game’s rules sheet and your previous questions in the same conversation. No data that identifies you: no names, no scores, no account.
Legal basis: your consent, asked before your first question. You can withdraw it at any time in Settings › Game.
Recipient: Google, which provides the artificial intelligence service. Google may use these questions and answers to improve its services, and people may read them: don’t include any personal information.
Transfer: this data may be processed by Google outside the European Union.
Retention: Marquoir keeps neither your questions nor the answers. Your IP address is only used to limit the number of questions, and is not kept for more than 24 hours. Google keeps them under its own terms.
Minors: this service is not offered in the under-13 profile.

“Rules are ready” notification

Purpose: letting you know, once, when the rules sheet of a game you are waiting for is published.
Data: the subscription identifier provided by your browser, the game and the language. No account, no email address, no IP address.
Legal basis: your consent: the “Let me know when its rules are ready” button, then allowing notifications. You can withdraw it at any time with “Stop notifying me”, or by blocking notifications.
Recipient: your browser’s notification service (Google, Apple, Mozilla or Microsoft), which delivers the message without being able to read it.
Transfer: this service may be located outside the European Union.
Retention: deleted as soon as the notification is sent, as soon as you tap “Stop notifying me”, and at the latest six months after your request.
Minors: this service is not offered in the under-13 profile.

Open game nights

Purpose: to let members aged 16 and over host an in-person game night and ask to join one, and to keep these meetings safe.
Data: your username; the “16 or older” statement and its date (the date of birth you enter is not kept); for a game night, its title, date, town, département, address, seats, games, your introduction and your note for guests; for a request, your introduction and its answer; your regulars, your blocks, your reports and your notification settings.
Who sees what: members who have joined see the game night without its address, and the host’s username (a private game night, only the host’s regulars); the host sees the username and introduction of each request; the address and the note for guests are shown only to accepted people. Your email address is never shown.
Legal basis: providing the service you ask for when you join open game nights; our legitimate interest in protecting participants (checking the stated age and the email address, blocks, reports, moderation). Emails can be turned off in “My game nights”; push is turned on and off device by device.
Recipients: the host and the guests, each for what concerns them; Marquoir for moderation; your browser’s notification service for push, which carries the message without being able to read it and may be located outside the European Union. Emails and notifications only carry the date and town of the game night.
Retention: the address and the note for guests are deleted the day after the game night; the game night, its requests and their introductions, thirty days later; in-app news, thirty days; a handled report, one year; the age statement, regulars, blocks and settings, until they are removed or the account is deleted, which also cancels your upcoming game nights and notifies the guests.
Minors: open game nights are for ages 16 and up and are never offered in the under-13 profile; stating an age under 16 closes access for that account.

Audience measurement

To know which rules pages are read, Marquoir uses Umami, installed on its own server. It sets no cookies and tracks nobody from site to site. It records the page viewed and its title, the site you came from, the device type, operating system, browser, screen size, language, and the country, region and city deduced from the connection; the IP address is not kept. It also counts a few actions, to know what gets used — a game started, a tool opened, a dictation, a recap shared, a card saved or shared (its template and format), the guided tour followed or skipped — with the game concerned, never a name, a score or what you type. It also records, rounded, how long the page takes to appear and to respond when you tap or click, and how much its content shifts while you look at it, to check that Marquoir stays fast. If your browser asks not to be tracked, Umami isn’t loaded: none of this is measured.

For authors who run their own page on Marquoir, the server also counts, day by day, the views of their page and of their games’ pages, and the clicks on their “Where to find it” links. These counts are anonymous and aggregated — no IP address, cookie or identifier — and nothing is counted if your browser asks not to be tracked. They are passed on to the authors concerned.

For the “Trending” page, the server counts in the same way, day by day and game by game, how often each game page is read, alongside the Discover points and games played with an account. These counts are anonymous and aggregated, deleted after sixty days, and nothing is counted if your browser asks not to be tracked.

With an account (optional)

An account lets you find your games on your other devices. It stores:

your name, your email address and your username;
your password, in a hashed form that cannot be read back;
your players (name and colour), game nights, games, rounds, collection, wish list, loans (with the borrower’s name), planned game nights (with their place), house games and score sheets, and preferences, to sync them;
for each sign-in session, the IP address and browser used; a session expires after 90 days.

Your email address is shown to nobody. Other users only see your username, when they invite you to a table.

What you choose to share

Invitation by username: once the invitation is accepted, the invited account sees the games it took part in.
Live follow: a game’s follow link shows its names and scores to anyone who opens it. It is secret and you can turn it off at any time. Anyone who opens it can announce their round score there: that number is kept in the server’s memory for thirty minutes at most, until the table picks it up.
Joining a table: if you scan a table’s QR code and type your first name or nickname, it is sent to the server, which keeps it in memory for one hour at most, until the table seats you; it then appears among the names of the shared game, deleted along with it. It is linked neither to an account nor to your IP address. If you wear a name colour, a frame, an emblem or a title chosen in Customise, they go with your name and are kept the same way, so that the table shows you as you see yourself; only the name colour then appears in the shared game, and is erased with it. None of this is sent if “Show levels and rewards” is off.
Reporting a mistake: your message and the game concerned are sent, linked to your account if you are signed in.
Suggesting a game: the game name, link and message you enter are emailed to Marquoir’s maintainer and kept on the server. Your email address, optional, is only used to reply to you.
Dictating a round: when you press “Dictate the round”, what you say is transcribed by your browser’s speech recognition service (Google, on Chrome and in the Android app). Marquoir only receives the text, on the device, and records no audio.
Shared wishlist: if you create a sharing link (account required), the first name or nickname, occasion, message and notes you enter are stored with your account. Anyone who opens this secret link sees these texts and your wishlist, except the games you already own; it is not indexed, and you can replace or stop it at any time. A visitor who reserves a game may leave a first name, optional, shown to other visitors but never to you; their browser keeps a key to cancel. No IP address is stored with the reservation.
Discover: “like” or “pass” adds a point to the game’s counter, with no link to you.
Rating a game: with an account, your 1-to-5 rating is saved and attached to your account, so that only one counts per person. It is shown to no one: the game page only displays the average and the number of ratings.
Community score sheets: with an account, the score sheet you suggest, with the text you typed into it, is saved with your account and reviewed before being published. Once published, anyone can copy it, without knowing who suggested it. Your thumbs up or down is linked to your account so that only one counts per person; only the totals are shown.
Shared tournament: if you share a tournament (account required), a copy is sent to the server and updated at every change: the names of the tournament and the game, the names of the entrants, the tables, the scores, the standings and, if you chose them, the club’s branding — name, colour, logo and sponsor. Anyone with the follow link sees it. Anyone with the five-character code can send their table’s scores: they are kept until you approve or reject them. “Stop” erases the copy and those scores.
Suggesting a barcode: with an account, the code of an unknown box and the game you match it with — or the name, publisher and year read on the box — are saved with your account until they are reviewed. A rejected suggestion is erased; an accepted code then serves everyone, without your name being shown.
Reporting a shop: the type of error and the optional comment are sent with no account and no IP address, and kept to keep the directory up to date.
Suggestion box: the text you write (with your “Give feedback” score, if you give one) and the page you came from are sent without any account, IP address or email address. A text containing a link, an email address or a phone number is refused.
Finding a shop: the town or postcode you search for goes to the server, which passes it on to the IGN geocoder (see below). If you tap “Near me”, your location, rounded to about a hundred metres, is sent to the server to find nearby shops. It is saved nowhere, but it travels in the request’s address: like any address requested from the site, it can therefore appear in the server’s technical logs. The chosen town stays on the device.
Count visitors: when audience measurement is active, your IP address is turned on our server into a fingerprint that changes every day. Only this fingerprint is recorded, never the address: it is used to know how many different people came during the day, and it is deleted after thirty-five days.

Children

In the app, Marquoir asks for the year of birth on first launch. Only the age bracket is kept, on the device; the year is not.

For anyone under 13, nothing personal leaves the device: no account, no sync, no invitation, no follow link, no table to join, no report, no game suggestion, no dictation, no location, no audience measurement, no import file. The scanner then only recognises boxes the device already knows: no code is sent. The server only receives what it needs to answer: the pages requested, the text typed into the game search, the “like” or “pass” of Discover and the “I want its rules”, simple counters per game, and, if they join a tournament with its code, their table’s scores. The few games whose subject isn’t for children — gambling games, drinking games, adult humour — are not offered.

What Marquoir does not do

No advertising, no reselling, no sharing of your data with third parties: authors only receive the anonymous counts described above. Data is hosted in France, on Marquoir’s server. The Android app does not access your contacts. Your location is only requested if you tap “Near me” to find a shop: rounded to about a hundred metres, it is used for that search and not kept, apart from the server’s technical logs. The camera is only used to read a box’s barcode or a table’s QR code, on the device: no image is sent, only the code read. Importing from another app (MyLudo, BoardGameGeek, a spreadsheet) reads the files on your device: only the boxes’ barcodes are sent, to recognise them, and they are not kept, apart from the server’s technical logs. Importing with your BoardGameGeek username sends that username to BoardGameGeek through Marquoir’s server, which keeps the answer only for a few minutes, in memory. An unknown barcode is kept, with no link to you, to choose the next games to add. The microphone is only used to dictate a round, when you ask it to.

To carry it and protect it from attacks, the site’s traffic goes through the Cloudflare network, which sees, like any network intermediary, the IP address and the page requested. Cloudflare takes part in the EU–US Data Privacy Framework.

The shop directory’s map is drawn with tiles from OpenFreeMap (tiles.openfreemap.org), which your browser requests from it directly: this service therefore receives your IP address and the map area shown. Searching for a town or postcode goes through Marquoir’s server instead: the IGN’s public geocoder (the Géoplateforme) only receives the text searched, never your IP address.

Affiliate links

A “Where to buy it” link leads to a partner shop and carries an affiliate code in its address: it tells the shop you came from Marquoir, nothing more. Marquoir sends it nothing about you; what happens next on its site is covered by its own privacy policy. These links never appear in the child profile.

Retention periods

Data on the device: until you delete it.
Account and synced data: until the account is deleted.
Sign-in sessions: 90 days at most.
Game ratings: until you remove the rating, or delete the account.
Shared wishlist and reservations: until you clear the reservations, or until the account is deleted. A stopped link leads nowhere, immediately.
Games shared without an account: seven days after their last update, or until you stop sharing.
Collections shared with a code: six months after their last update, or until you stop sharing or delete your account.
Error reports: kept to fix the rules; when the account is deleted, they lose their author.
Shop reports: kept to keep the directory up to date, with nothing that identifies you.
Score sheets suggested to the community: until the account is deleted. Votes: until you withdraw yours, or the account is deleted.
Shared tournaments: until you cut the link, or the account is deleted. Scores sent by tables: until the organiser approves or rejects them.
Barcode suggestions: until they are reviewed; a code matched to a game keeps a record of the account that suggested it.
Game suggestions: kept to follow up additions; any email address is deleted as soon as the suggestion is handled.
“Rules are ready” notification: deleted once sent, as soon as you tap “Stop notifying me”, or at the latest six months after the request.
Open game nights: address deleted the day after the game night, game night and requests thirty days later, handled reports one year (details above).
Suggestions: one year after sending.
Public player card: until you turn the page off; its address and the date of the last publication, until the account is deleted.
Friends: friend profile and the date of its last upload, until you leave Friends or delete your account; friendships and requests, until one of you withdraws them or one of the accounts is deleted; blocked accounts, until you unblock them or delete your account.
Audience measurement (Umami): 13 months.
Server technical logs (IP address, page requested, location sent by “Near me”): 6 months, for security.

Deleting your account

In Account → Profile, “Delete the account” erases, after confirming with your password, the account and everything linked to it: sign-in sessions, players, game nights, games, rounds, synced preferences (collection, wish list, loans, planned game nights, house games and score sheets), game ratings, invitations and follow links, the shared wish list and its reservations, score sheets suggested to the community and your votes, shared tournaments and the scores received from their tables. Your error reports remain, without an author; so do your barcode suggestions, no longer leading to any account. If you no longer have access to your account, write to [email protected] from the account’s address.

Your public player card, its address and the date of its last publication are deleted with the account.

So are your friend profile, your friendships, your requests and your blocks.

Your rights

You can access your data, correct it, export it (Settings → Export) and delete it. For any question or request: [email protected]. You can also file a complaint with the CNIL (cnil.fr), the French data protection authority.