Privacy Policy

What we collect

• Account data: username, email, and a securely hashed password (we never store your password in plain text).
• Gameplay data: hands played, statistics, and progress used to power coaching and leaderboards.
• Usage events: which pages and features you use, stored on our own server for 90 days and never shared. If your browser sends Do Not Track, none are recorded.
• If you use social login: your provider account ID, email, and avatar from Google/Discord.

How we use it

To run your account, save your progress, provide coaching and stats, show leaderboards, and send account emails (verification, password reset). We do not sell your personal data or use it for third-party advertising.

Cookies & sessions

We use a single secure, httpOnly session cookie (and/or a token in your browser's local storage) to keep you logged in. These are functional, not tracking cookies.

Email

Transactional emails (verification, password reset) are sent via our email provider. We only send email needed to operate your account.

Data retention & deletion

You can deactivate your account from your profile settings, which disables access. To request full deletion of your data, contact the site operator.

Security

Passwords are never stored in a readable form, traffic is encrypted in transit, and access to your data is authenticated. No system is perfectly secure, but we take reasonable measures to protect your information.

Contact

Privacy questions or deletion requests? Write to the contact address. See also our Terms of Service.