Privacy Policy

1. What we collect

Account data: email address and username, via our authentication provider (Clerk). We never see or store your password.

Content you provide: hand histories you import, scenarios you build, custom bots you configure, and your quiz/drill/live answers.

Usage data: the activity ledger that drives XP/level/stats (which quizzes you answered, session results) and diagnostic/leak-detection output derived from your own hands.

Billing data: handled entirely by Stripe. We store only your Stripe customer/subscription IDs and subscription status — never your card number.

Cookies: see the Cookie Policy for the full list.

2. How we use it

To provide the Service: run your training sessions, compute your stats and leaks, generate quiz spots, and remember your subscription tier.

To operate anonymous usage caps (e.g. the daily quiz limit for signed-out visitors) via a short-lived, non-identifying cookie counter.

To keep the Service secure and reliable (error monitoring), and, only where explicitly enabled, to understand aggregate product usage (analytics) — see §5.

3. Public leaderboards and the scenario gallery

Public leaderboards are opt-in and off by default (Settings → Leaderboards); friends-only boards do not require opting in. Scenarios you publish to the public gallery are visible to anyone with the link or browsing the gallery — do not publish a scenario that reveals information you consider private.

4. Third parties we share data with

Clerk — authentication and account identity.

Stripe — subscription billing and payment processing.

A Cloudflare R2 / S3-compatible object store — storage of the hand-history files you upload.

Once enabled in your deployment: Sentry (error monitoring — technical crash reports, not hand data) and PostHog (product analytics, aggregated usage events).

We do not sell your personal data to anyone.

5. Your rights

You can export or delete your imported hand data at any time from Settings → Your data (this wipes hand histories, imports, and derived stats/playstyle, but keeps your account and learning progress).

You can permanently delete your entire account from Settings → Delete account: this cancels any subscription, deletes every blob and database row tied to you, and removes your sign-in — irreversible.

Depending on your location, you may have additional rights under applicable data protection law (e.g. GDPR, CCPA) to access, correct, or restrict processing of your data. Contact us (§7) to exercise these.

6. Data retention

We retain your account and content for as long as your account exists. Billing event logs (a Stripe webhook audit trail) are kept for accounting/dispute purposes even after cancellation, until account deletion.

7. Contact

Questions or data-rights requests: see the support address in the site footer.

8. Changes to this policy

We may update this policy from time to time; material changes are reflected by an updated "last updated" date above.