Privacy Policy

PokerFingers is a study tool for poker players, with play-money tables for practising with friends. This page explains what we store, why, and what you can do about it. We don't sell your data, show ads, or use advertising or analytics trackers.

Who is responsible

The data controller for PokerFingers under the EU General Data Protection Regulation (GDPR) is Iason Malkotsis, reachable at iason@malkotsis.com. Write to that address for anything about your data.

What we store

• Account: your email address and display name, and, if you sign in with Google, your Google name and profile picture. We never see your Google password.
• Your poker data: the hands, notes, tags, and player names you record or import, and the groups you belong to with your role in each.
• Live tables: every hand played (cards dealt, actions, results), buy-ins and cash-outs, and the statistics calculated from them. Your hole cards are shown to other players only if they were shown at the table, or if the table was created as “open-face review”, which everyone sees before sitting down.
• On your device: a copy of your data in your browser's storage so the app works offline, and a sign-in cookie that keeps you logged in. We use no other cookies.
• Technical logs: our servers and hosting providers keep short-lived request logs (such as IP address and time) to keep the service running and secure.

What we don't store

• Voice and video. Calls at a table travel directly between players' devices, encrypted. When a direct connection isn't possible they pass through our relay, which forwards the encrypted stream without recording or being able to read it. We never record calls.
• Table chat. Chat is kept in the table server's memory while the table is open and is not saved.
• Payment details. PokerFingers is free and play money only; we don't collect any.

Why we're allowed to (legal bases)

• To provide the service you signed up for (GDPR Art. 6(1)(b)): your account, your hands and groups, live tables, and the statistics drawn from them.
• Legitimate interests (Art. 6(1)(f)): short-lived technical logs and abuse prevention, to keep the service secure and working.
• Your choice: your microphone and camera are used only after you turn them on for a call, and you can turn them off at any time.

Who can see your data

• Your personal hands are visible only to you. Hands in a shared group, and your display name, are visible to that group's members.
• People at the same live table see your display name, your play, and your voice or camera if you turn them on. During a call, the other players' devices learn your IP address, as with any direct call.
• Hand links you choose to share contain the hand itself and can be opened by anyone who has the link.

Service providers

We use Cloudflare (website delivery, DNS, and protection), Oracle Cloud in Canada (servers, database, and sign-in email delivery), and, if you choose it, Google for sign-in. They process data on our behalf to run the service. Data is therefore processed outside the European Economic Area, mainly in Canada; such transfers rely on an adequacy decision of the European Commission or on standard contractual clauses with the provider.

How long we keep it

We keep your account and poker data for as long as you have an account. Hands you delete disappear from the app straight away; to erase your whole account use the Account page; to have individual deleted hands purged from our database, write to us and we will do it within 30 days. Backups expire on their own shortly after.

Your choices

• On your Account page you can download everything we hold about you as a file, and delete your account, at any time and without asking us.
• Export your hands from the Players tab, and edit or delete them in the app.
• Ask us for a copy of your data, to correct it, or to delete your account by writing to iason@malkotsis.com. Under the GDPR you have the rights of access, rectification, erasure, restriction, objection, and data portability, and the right to lodge a complaint with your data protection authority. We answer within one month and never charge for it.
• Hands you played at a live table are also part of the other players' records. When you delete your account we replace your name in those hands with an anonymous label.

Children

PokerFingers is for adults. It is not intended for anyone under 18.

Changes and contact

If this policy changes in a way that matters, we will say so in the app. Questions: iason@malkotsis.com.