Privacy Policy

1. Introduction

This Privacy Policy explains how Street Poker collects, uses, stores, and protects your personal information when you use our poker analytics platform. We are committed to safeguarding your privacy and being transparent about our data practices.

2. Information We Collect

We collect the following types of information:

• Hand histories: Poker hand data that you upload to the platform for analysis
• Account information: Name, email, and profile data provided through social login (Google, Discord, etc.)
• Usage data: Features you use, frequency of use, and interaction patterns within the app. Vercel Web Analytics may receive privacy-oriented page-usage measurements when enabled for the deployment.
• Device information: Browser type, operating system, and screen resolution for compatibility and optimization
• Support telemetry: If the client error beacon is enabled, it sends capped, deduplicated JavaScript error messages, source locations, stack traces, page URL, app version, and user-agent data to our Supabase error-logging function. It is not a hand-history upload channel.
• Bankroll and live session records: If you use the Bankroll tracker, the sessions you log (venue, stake, game, buy-in, cash-out, result, start time and duration) are stored on your own device. We do not upload them.
• Venue location: When you tag a session's venue you may grant location access while the app is in use. The coordinates are used to label and recall that card room, are kept on your device, and are never transmitted. We do not collect location in the background.
• Session screenshots: You can import sessions by photographing or choosing a screenshot from another tracker. The image is read by optical character recognition that ships inside the app and runs on your device. The picture is never uploaded.
• Friends: The players you choose to track are stored on your device.
• Weekly leaderboard: If you are signed in, your display name (or the part of your email address before the @ symbol, when you have not set a name), your weekly XP and the number of lessons you completed are published to a leaderboard that any visitor can read. Your account identifier is not readable by other users.
• Lesson telemetry: Anonymous lesson events (which lesson and step, an accuracy score, the drill type and difficulty level, and which client you used) are recorded with no account identifier attached.

3. How We Use Your Data

We use your data to:

• Analyze your poker performance and generate actionable insights
• Improve the product, fix bugs, and develop new features, including de-identified and aggregated analysis where permitted or with your consent
• Provide personalized training recommendations and leak detection
• Communicate important updates about your account or the service

4. Uploaded Hand Histories & Product Improvement

You are responsible for making sure you have the right to upload and analyze any hand histories you provide. You retain ownership of those hand histories.

We may use uploaded hands to provide your requested analytics, detect bugs, tune features, and improve the service. When hand histories are used for product improvement beyond your direct analysis, we use de-identified or aggregated data where possible and honor any opt-out or consent settings available in the app.

We do not sell hand histories. We do not publish your raw hand histories or personal account details without your permission.

5. Data Storage

Client-side: Your hand history data and app settings are stored locally in your browser using localStorage and IndexedDB. This data never leaves your device unless you explicitly connect to cloud storage.

Server-side: When connected to an account, your data is stored on Supabase infrastructure with encryption at rest. All data in transit is protected with TLS encryption.

Payment data: We do NOT store any payment information. All payment processing is handled securely by Stripe, our PCI-compliant payment processor.

6. Data Sharing

We do NOT sell your data. We do NOT share your personal information with third parties except for the following service providers, each operating under strict data processing agreements:

• Stripe: Payment processing for subscription billing
• Supabase: Secure cloud data storage, authentication, edge functions, account deletion/export workflows, and error telemetry
• Google Fonts: Font files requested by the web and PWA shells from Google's CDN. Self-host these assets or confirm the CDN disclosure and regional privacy requirements before publication.
• OpenAI: When a signed-in member uses the Coach, the selected hand/context and chat messages are sent through our server-side proxy to OpenAI to generate the requested response. The browser does not receive our OpenAI API key. Confirm the applicable OpenAI processing terms and retention settings before publication.
• Vercel: Hosting and, when enabled, Web Analytics measurements for public/app pages. Confirm the deployment’s analytics configuration and applicable disclosures before publication.

7. Coach, Analytics & Error Telemetry

Coach: The Coach is an authenticated, server-proxied feature. Messages may include hand histories, player context, and notes that you choose to provide. Do not submit information you are not authorized to disclose. The service applies server-side subscription and usage controls.

Analytics: Vercel Web Analytics is configured as a deployment feature rather than an advertising profile. Verify whether it is enabled in the production project and document the exact fields and retention period.

Error telemetry: The client error beacon is capped per session and the server applies rate limits, but the exact operational retention period for error logs is not established in this repository.

8. Your Rights (GDPR)

Under applicable data protection laws, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to deletion: Request that we delete your personal data and account
• Right to data export: Receive your data in a portable, machine-readable format
• Right to object: Object to the processing of your personal data for specific purposes

To exercise any of these rights, contact us at privacy@streetpoker.pro.

You can also exercise these rights directly from your account: Settings → Data & Privacy → Privacy & Account.

9. California & U.S. State Privacy Rights

If you are a resident of California or another U.S. state with a comprehensive privacy law, you have the right to know what personal information we collect about you, to access it, to correct it, to delete it, and to receive it in a portable format. You also have the right not to be discriminated against for exercising any of these rights.

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising, and we have not done so in the preceding 12 months. The categories of personal information we collect (identifiers such as name and email, commercial information such as subscription records, and internet activity such as in-app feature usage) and the purposes we use them for are described in Sections 2 and 3 above.

To exercise these rights, use Settings → Data & Privacy in the app or contact us at privacy@streetpoker.pro. We verify requests through your authenticated account. An authorized agent may submit a request on your behalf.

10. Cookies & Local Storage

We use essential browser storage (localStorage and IndexedDB) for core app functionality. These records remain on your device until you clear them or use the app’s data controls. The hosted app also loads Vercel Web Analytics when that deployment feature is enabled; confirm its cookie/storage behavior for the production configuration. We do not use advertising cookies.

11. Data Retention

Active accounts: Your data is retained for as long as your account remains active and you continue to use the service.

Deleted accounts: The account deletion workflow records durable cleanup progress and retries Stripe, storage, and authentication cleanup until each phase succeeds. Do not rely on this page for a fixed deletion deadline until legal/product confirms provider backups, billing records, error logs, and the retention schedule.

On-device data: Bankroll sessions, venue location history, friends and imported files stay on your device until you remove them. The Clear local data control in Settings deletes your Quest progress, bankroll, friends, uploads, sessions and location history in one action, and uninstalling the app removes them with it. Removing on-device data does not require an account deletion request.

12. Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit, secure HTTPS connections for all communications, and regular security reviews of our infrastructure and codebase.

13. Children's Privacy

Street Poker is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a user under 18, we will promptly delete that information.

14. Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

15. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@streetpoker.pro.