← Home

Privacy Policy

Last updated: September 14, 2026

Who we are

GrindSense is operated by StoriaBrevi LLC, a limited liability company registered in New Jersey, United States, which is the controller of the information described here. The service is for adults; we do not knowingly collect information from anyone under 18, and we delete such an account when we learn of it. Questions and requests go to the contact address; a postal address is available on request at the same email.

What we collect

  • Account data: username, display name, email, and your password, which is never stored in a readable form. If you came in on an invite, which invite it was.
  • Gameplay data: every hand you play, with your cards and actions, plus statistics, chips, XP, achievements and progress used to power coaching, hand review and leaderboards.
  • Things you write: table chat, notes on opponents and friend requests. Notes are private to you; please do not record sensitive personal information about other people in them.
  • Usage events: which pages and features you use, kept by us for 90 days. To count visits from the same browser together, your browser also keeps a random ID it makes itself, which says nothing about who you are. If your browser sends Do Not Track, none of this is recorded or kept.
  • Server logs: the address your connection comes from, the time and the request, kept for security and debugging in a log that is discarded within 30 days.
  • If you sign in with Google or Discord: the account ID and email address the provider sends us, and whether it has verified that email. See "Signing in with Google or Discord" below.
  • If you add a passkey: its public key, a name for it and when it was added and last used. See "Passkeys" below.

How we use it

To run your account, save your progress, provide coaching and stats, show leaderboards, keep the tables fair and the service secure, and send account emails (verification, password reset). We do not sell your personal data, and we do not use it for third-party advertising.

Who handles it for us

Your data is stored in the United States. A small number of service providers process parts of it on our behalf; they may use it only to provide their service to us. We do not use third-party analytics, advertising or tracking services.

ProviderWhat it doesWhat it receives
Hosting and network providersDeliver the site and carry your connection to itConnection details any network provider sees: addresses, timing, request sizes
Backup storage providerHolds backup copies of our dataCopies of the data, overwritten on a rolling basis
Email delivery providersDeliver verification and password-reset emailYour email address and the message
Google, DiscordOnly if you choose to sign in with themThey handle the sign-in and send us your account ID with them, your email address and whether they have verified it

When we disclose information

Beyond the providers above, we disclose personal information only: to comply with a law, regulation, subpoena, court order or other legal process; to respond to lawful requests from public authorities; to detect, prevent or address fraud, abuse, security or technical problems; to protect the rights, property or safety of StoriaBrevi LLC, our users or the public; in an emergency where we believe in good faith that disclosure is necessary to prevent serious harm; or to a successor if the service or StoriaBrevi LLC is sold, merged or reorganised, in which case this policy continues to apply to the information transferred.

Cookies & sessions

We use a cookie, and your browser's own storage, to keep you signed in. While you sign in with Google or Discord, a second, short-lived cookie is used to complete that sign-in. These are functional, not tracking cookies. Your browser also remembers settings you choose on that device, such as display preferences.

Email

Transactional emails (verification, password reset) are sent through an email delivery provider, which sees your address and the message. We only send email needed to operate your account, and never marketing.

Signing in with Google or Discord

If you choose to sign in with Google or Discord, the sign-in itself happens with that provider under its own privacy policy. When it completes, the provider sends us your account ID there, your email address and whether it has verified that address. We keep the account ID to recognise you next time, and a new account uses that email address. We do not take your name or your picture from the provider: you choose your player name here, and it need not be the name on that account. A Google or Discord account is joined to an existing GrindSense account only when you link it yourself, from your Profile, and you can unlink it there. Deleting or deactivating your GrindSense account does not change your Google or Discord account, and revoking GrindSense's access at the provider does not by itself delete your GrindSense account; ask us for that.

Passkeys

If you add a passkey from your Profile, we store only its public key, which cannot sign anyone in by itself, together with a name for it (such as "iPhone"), and when it was added and last used. The passkey itself is never sent to us, and your fingerprint, face or device PIN never leaves your device. Removing a passkey from your Profile deletes what we hold; deleting your account deletes all of them. Resetting your password also removes your passkeys and linked Google or Discord accounts, to protect your account; you can add them again from your Profile.

What other players see

DataVisible to
Username, display name, level, badgesOther players
Leaderboard results, tournament finishesOther players
Cards you show at showdownPlayers at the table, and viewers of a replay of that hand
Cards you fold without showingNobody but you
Table chatEveryone at that table while it is played
Notes you write about opponentsNobody but you
Email address, sign-in detailsNobody but you and us
A replay you share by linkAnyone who has the link

What you fold without showing is never revealed to anyone, including in hand reviews and shared replays.

Data retention & deletion

We keep your account and gameplay data for as long as the account exists. "Deactivate Account" in your profile deactivates the account and signs you out. "Delete my data", from the profile or by writing to us, locks the account at once and permanently deletes it and everything attached to it (hands, statistics, notes, chat attribution, friendships, XP and achievements) 30 days later; logging in during those 30 days cancels the request. After that the deletion cannot be undone, and our rolling backup copies are overwritten within about a further seven days.

Some information may be kept longer where that is necessary to comply with a legal obligation, to prevent fraud or abuse, to maintain security, to resolve disputes, to enforce our agreements, or to establish, exercise or defend legal claims; a provider that delivered an email to you may keep its own delivery records under its own policy. Usage events and server logs expire on their own schedules above.

You may also reset your own statistics from the profile without deleting the account.

Your rights

You can see and correct your account details in the profile. You can ask us for a copy of the data we hold about you, for a correction, or for deletion, by writing to the contact address. We answer within 45 days. If we refuse a request, we will say why; reply to that answer and a person will review the decision. Where the law of your state or country gives you rights beyond these, write to us and we will honour them to the extent that law applies.

Visitors from outside the United States

GrindSense is operated from the United States and your data is processed and stored there, under United States law, which may differ from the law where you live. By using the service you accept that transfer. We do not currently offer region-specific versions of the service.

Security

Passwords are never stored in a readable form, traffic is encrypted in transit, and access to your data is authenticated. No system is perfectly secure, but we take reasonable measures to protect your information, and we will tell you if a breach affects your account where the law requires it.

Changes

We may update this policy; the date above says when. A change that reduces your rights or widens what we collect takes effect only after it has been posted here.

Contact

GrindSense is operated by StoriaBrevi LLC. Privacy questions, copies, corrections or deletion requests: the contact address. Postal address:

StoriaBrevi LLC
c/o Northwest Registered Agent LLC
971 US Highway 202N, Ste N
Branchburg, NJ 08876

See also our Terms of Service, Copyright and DMCA and Accessibility pages.

© 2025–2026 StoriaBrevi LLC. GrindSense.com is operated by StoriaBrevi LLC.