Terms of Service of aiboardgames.cloud

Last updated: 14 May 2026

1. General provisions

These Terms of Service ("Terms") govern the use of:

• the website available at the domain aiboardgames.cloud (the "Service"),
• the game "Koleją przez Polskę" and other games and features made available through the Service (the "Game"),
• the associated account, login, ranking, save-game, feedback, and admin-panel functions.

The Service is operated by an individual, Paweł Twardziak, doing business as AI Board Games (the "Operator").

The Operator's contact address for all matters relating to the Service, including the filing of complaints and GDPR requests, is terms@aiboardgames.cloud.

These Terms serve as the terms and conditions for the provision of services by electronic means within the meaning of Article 8 of the Polish Act of 18 July 2002 on the Provision of Services by Electronic Means.

2. Definitions

For the purposes of these Terms:

• User - a natural person using the Service who has full legal capacity or acts with the consent of their statutory representative, and is at least 16 years of age (see section 5),
• Account - the set of User data stored in the Service's database, identified by a unique e-mail address and an internal identifier (Player ID),
• Magic link - a single-use sign-in link sent to the User's e-mail address,
• Sign-in with Google - an alternative method of creating and signing into an Account using the Google OAuth 2.0 service,
• AI - a gameplay module driven by a Large Language Model (LLM) acting as an opponent or assistant during the Game,
• User Content - data submitted by the User to the Service, in particular the nickname, feedback text, and in-game chat messages,
• Privacy Policy - the document describing the rules for the processing of personal data, available in the Service under the name "Privacy Policy".

3. Conclusion and termination of the agreement

The agreement for the provision of services by electronic means is concluded at the moment of the User's first successful sign-in to the Service (via magic link or via Google) and confirmation of acceptance of these Terms and the Privacy Policy in the displayed consent dialog.

The agreement is concluded for an indefinite period of time. The User may terminate the agreement at any time by:

• signing out and ceasing to use the Service, or
• using the account-deletion procedure described in the Privacy Policy (section "Account deletion") and the rules set out in section 12 of these Terms.

The Operator may terminate the agreement with the User with immediate effect in the cases described in section 12, as well as terminate the agreement subject to a 90-day notice in the event of non-acceptance of a new version of the Terms in accordance with section 13.

4. Technical requirements for using the Service

Use of the Service requires:

• a device with Internet access,
• an up-to-date web browser supporting JavaScript, HTTP cookies, WebSocket, and Server-Sent Events,
• an active e-mail address (to receive a magic link) or an active Google account.

The Operator is not liable for the unavailability of the Service caused by factors on the User's side, in particular by the configuration of the device, software, network, or third-party services.

5. User age

The Service may be used only by persons who have reached the age of 16. This age threshold corresponds to the requirement of Article 8(1) of the General Data Protection Regulation (GDPR) concerning consent to the processing of personal data in information society services offered directly to a natural person.

The Operator does not provide the Service to persons under the age of 16. Where the Operator forms a reasonable suspicion that an Account is being used by a person under the age of 16, the Account may be suspended or deleted in accordance with section 12.

6. User Account and sign-in

The Account is created automatically upon the first successful sign-in, regardless of the chosen method (magic link or Google).

The User:

• is required to provide a genuine e-mail address to which they have access,
• is required to keep confidential any codes, links, and authentication tokens received from the Operator, as well as the sign-in credentials of the linked Google account,
• is responsible for actions taken from their Account, except where the breach occurred for reasons attributable to the Operator,
• may review the list of their active sessions in the Account panel and terminate them themselves.

The Operator does not verify the User's identity beyond verifying control over the e-mail address (by clicking the magic link) or authentication on the side of the OAuth provider (Google).

7. User Content

The User may publish User Content in the Service, in particular the nickname, feedback text, and in-game chat messages (where such functionality is available in the Game).

The User represents that:

• they hold all rights to the published User Content or have obtained the required consents and authorisations to publish it in the Service,
• the User Content does not infringe the rights of any third parties, applicable laws, or accepted standards of conduct.

Upon publication of User Content in the Service, the User grants the Operator a non-exclusive, royalty-free licence, limited in territory and time, to display, store, reproduce, and make available the User Content to other Users - only to the extent necessary for the operation of the Service (displaying the nickname in the ranking, presenting feedback in the admin panel, delivering chat messages to other participants of the game session). The licence expires upon the deletion of the relevant User Content or Account, subject to the anonymisation provisions set out in the Privacy Policy.

8. AI in the Game - disclaimers

The Game uses Large Language Models (LLMs) to drive computer opponents (AI) and - optionally - assistants during the gameplay. The default model provider is OpenAI; the User may select a different provider in accordance with the Privacy Policy (section 4).

The User acknowledges that:

• decisions made by AI in the Game are generated stochastically by LLMs and may be suboptimal, illogical, inconsistent, delayed, or surprising; this is inherent to current LLM technology, and the Operator does not guarantee any particular difficulty level, playstyle, or consistency of AI decisions across game sessions,
• AI may make rule-based errors when interpreting the state of the Game and, in extreme cases, may make a suboptimal move or refuse to make a move; in such situations the Operator endeavours to correct the error via a server-side validation layer, but does not guarantee the success of such correction in every case,
• content generated by AI in optional assistant features (commentary, hints, conversations with characters) does not constitute advice or opinion of the Operator and should not be treated as substantive information; it is part of the entertainment,
• AI does not have access to private data of other Users beyond data resulting from the state of the game session in which it participates - in accordance with the Privacy Policy,
• the availability, cost, and operational parameters of LLMs depend on the chosen external provider (OpenAI or other); the Operator is not liable for temporary unavailability on the side of such provider.

8.1. LLM provider API keys

The API key required to use the chosen LLM provider belongs to the User. The User is solely responsible for obtaining the key, for paying the provider, and for protecting the key against unauthorised disclosure.

The key may be used in one of two modes described in the Privacy Policy (section 4):

• Mode A (default): the key remains exclusively in the memory of the User's browser tab.
• Mode B (optional, requires the User's deliberate opt-in): the key is encrypted and stored in the Service database under the User's account; the full technical conditions, scope, and retention period are described in the Privacy Policy.

Storing the key in Mode B is based on the User's consent and may be withdrawn at any time by the User from the Account panel (Account -> "LLM API keys" -> "Remove"). The Operator is not liable for costs incurred at the LLM provider as a result of using the User's key - regardless of the chosen storage mode.

The User must not provide the Operator with a third party's API key or a key obtained unlawfully. Breach of this prohibition may result in immediate deletion of the stored key, suspension of the Account, and other consequences set out in section 12.

9. Prohibited uses of the Service

It is prohibited to:

• publish unlawful content in the Service, including content infringing personal rights, copyright, related rights, trademark rights, or other rights of third parties,
• publish offensive, vulgar, discriminatory, hate-inciting, or violence- or crime-promoting content,
• publish spam, advertising, or marketing content not agreed with the Operator, or phishing links,
• take actions aimed at bypassing authentication, authorisation, or technical limitations of the Service,
• automatically collect data from the Service (scraping), unless this falls within permitted use under applicable laws,
• carry out attacks against the infrastructure of the Service, in particular DoS / DDoS attacks, injection attempts, or exploitation of known security vulnerabilities,
• create and operate multiple Accounts in order to circumvent ranking mechanisms, restrictions, or blocks,
• use the Service in any way that may disrupt its proper functioning or its use by other Users,
• store in the Account (Mode B described in section 8.1) a third party's LLM provider API key or a key obtained in a manner inconsistent with the LLM provider's terms.

10. Liability and disclaimer of warranties

The Service is made available to the User free of charge, on an "as-is" basis.

To the extent permitted by mandatory provisions of law, the Operator:

• does not guarantee uninterrupted, error-free, or any specified quality of availability of the Service, in particular full availability during maintenance work, infrastructure failures, or failures of external providers (including LLM providers, e-mail providers, OAuth authentication providers),
• does not guarantee backward compatibility of saved games, in particular after material changes to game rules, database schema, or AI models; archived game sessions may be marked as unavailable for resumption,
• is not liable for the consequences of actions or inactions of external service providers it relies on or which have been chosen by the User (in particular OpenAI, Google, Resend, or other LLM providers selected by the User),
• is not liable for indirect damage, loss of profits, data loss beyond the level guaranteed by the Privacy Policy, or non-material damage arising from the use of or inability to use the Service.

The exclusions in this section do not limit the Operator's liability for wilful misconduct, nor any liability which under mandatory provisions of law cannot be limited or excluded (in particular vis-à-vis consumers, to the extent resulting from consumer-protection law).

11. Complaints

The User has the right to file a complaint regarding the operation of the Service. Complaints should be sent to terms@aiboardgames.cloud.

A complaint should contain:

• the e-mail address linked to the User's Account,
• a description of the issue and the circumstances of its occurrence (date, game session identifier, reproduction steps, where applicable),
• the User's request.

The Operator will examine the complaint within 14 days of its receipt. The response is sent to the e-mail address from which the complaint was submitted, unless the User has indicated a different correspondence address.

This procedure does not exclude the possibility for the User to make use of out-of-court methods of dispute resolution or judicial proceedings.

12. Account deletion and termination by the Operator

The User may delete their Account at any time, following the procedure described in the Privacy Policy. Deletion of the Account results in termination of the agreement with immediate effect and triggers the data anonymisation procedure for the Account described in the Privacy Policy.

The Operator may suspend or delete the Account with immediate effect in the event of:

• a material breach by the User of these Terms, in particular the provisions of section 9 (Prohibited uses),
• a reasonable suspicion that the Account is being used by a person under the age of 16 (section 5),
• receipt of an official summons or order from a state authority requiring such action,
• the need to protect the security of the Service, its Users, or third parties.

Notwithstanding the above, the Operator may delete the User's Account in the event of non-acceptance of a new version of these Terms after 90 days have elapsed from its entry into force, on the terms described in section 13.

The Operator will inform the User about the suspension or deletion of the Account by e-mail sent to the address linked to the Account, unless such notification obligation is excluded by law.

13. Changes to the Terms

The Operator may introduce changes to these Terms, in particular in order to:

• adapt them to changing legal provisions,
• account for new functionalities or new external providers,
• improve the security of the Service or the quality of the services provided,
• correct obvious editorial errors.

The Operator will inform the User of any material change to the Terms by displaying an acceptance dialog at the next sign-in to the Service. Failure to accept a new version of the Terms makes further use of the Service from the given Account impossible; however, it does not deprive the User of the right to submit a data-export request or to delete the Account in accordance with the Privacy Policy.

If the User does not accept the new version of the Terms within 90 days of its entry into force, the Operator may delete the User's Account by operation of these Terms. The consequences of Account deletion are described in section 12 and in the Privacy Policy (data anonymisation, retention of the internal Player ID identifier for the purposes of game history). Until the expiry of that period, the User retains the right to request a data export and to delete their Account themselves.

Each version of the Terms is numbered. The current version and the date of the last update are indicated at the beginning of this document.

14. Final provisions

The original language of these Terms is Polish. Translations into other languages have an auxiliary character; in the event of discrepancies, the Polish version prevails.

In matters not regulated by these Terms, the provisions of Polish law apply, in particular:

• the Civil Code,
• the Act of 18 July 2002 on the Provision of Services by Electronic Means,
• the Act of 30 May 2014 on Consumer Rights,
• the General Data Protection Regulation (GDPR) and the Act of 10 May 2018 on the Protection of Personal Data.

Disputes arising from the use of the Service are resolved by the common courts of competent local jurisdiction in accordance with the provisions of the Code of Civil Procedure. A consumer also has the right to use out-of-court methods of complaint handling and pursuit of claims, including through the European Commission's ODR platform available at https://ec.europa.eu/consumers/odr.

These Terms enter into force on the date indicated at the beginning of this document.

Terms of Service - version 3, dated May 14, 2026.