Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Display name
• Password (encrypted)
• Profile photo (optional)

Usage Data

We automatically collect:

• IP address and device information
• Browser type and operating system
• Pages visited and features used
• Error logs and performance metrics

Game and Tournament Data

When you participate in games, we collect:

• Game results and player standings
• Tournament statistics and history
• Buy-in amounts and payout calculations (for record-keeping, not payment processing)

2. How We Use Your Information

We use your data to:

• Provide and improve the Service
• Manage your account and subscriptions
• Send transactional emails (game invites, password resets)
• Track game statistics and leaderboards
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Data Sharing

We do not sell your personal information. We share data only with:

Service Providers

• Cloudflare: Hosting and infrastructure
• Stripe: Payment processing
• Resend: Transactional emails
• Axiom: Error tracking (optional)

Legal Requirements

We may disclose data when required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Protect our rights and safety
• Investigate fraud or security incidents

4. Data Retention

We retain your data for:

• Account data: Until account deletion + 30 days
• Game history: Indefinitely (for league records)
• Billing records: 7 years (legal requirement)
• Usage logs: 90 days

5. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Delete your account and data
• Portability: Export your data in JSON format
• Objection: Opt out of marketing communications
• Restriction: Limit how we process your data

To exercise these rights, email privacy@poker-night.net.

6. Cookies and Tracking

We use the following cookies:

See our Cookie Policy for details.

7. Data Security

We protect your data using:

• HTTPS encryption (TLS 1.3)
• Password hashing (bcrypt)
• Multi-factor authentication (optional)
• Regular security audits
• Automated backup systems

Despite these measures, no system is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately.

9. International Data Transfers

Your data is stored in Cloudflare's global network. By using the Service, you consent to data transfers to countries that may have different privacy laws than your jurisdiction. We use Standard Contractual Clauses approved by the EU Commission for GDPR compliance.

10. Changes to Privacy Policy

We may update this policy periodically. Material changes will be notified via email at least 30 days before taking effect. Continued use constitutes acceptance.

11. Contact