Privacy Policy

1. Controller

The controller for data processing on this website and in connection with the account and license system is the private individual named in the Legal Notice. PokerHandTracker is an independent community project run privately, without a company, and is not affiliated with CoinPoker.

[Name der verantwortlichen Person], [Straße und Hausnummer], [PLZ und Ort], [Land] — email: kontakt@pokerhandtracker.com

2. Principle: your game data is processed locally

The desktop application analyzes your poker hands exclusively on your own computer. Hand histories, statistics and session data are not transmitted to us or to third parties and never leave your device.

The same applies to the hand analysis and the screenshot recognition on this website: uploaded or pasted hand histories and images are read and evaluated exclusively in your browser. Neither the files nor the results are transmitted to our server or to third parties. The text recognition software is loaded from our own server, not from third parties.

The one exception is sharing a hand (see section 3): this only happens when you explicitly trigger it.

3. What data we process

• Account data: email address and a cryptographic hash of your password (we never store the password itself in plain text).
• License and activation data: license key, an anonymized device fingerprint (a hash used to limit the number of devices) and the times of activation and last check.
• Payment data: payments are processed by Stripe. We only store Stripe identifiers (customer and subscription ID) to assign your license. We do not receive or store credit card or bank details.
• Emails: we only send emails that belong to operating your account, such as resetting your password, confirming your email address, a welcome message after registration and a purchase confirmation. For this we process your email address and the content of the respective email. We do not send advertising or newsletters. One-time links in these emails are stored only as a checksum and are valid for a short time.
• Shared hands: if you share a hand on the website, we store the text of exactly that one hand on our server and make it available under a random link. If you are signed in, we assign the hand to your account so you can manage it. Anyone who knows the link can view the hand. For hand texts from the client, you can choose when sharing to replace player names with neutral labels (“Hero”, “Seat N”) before storing. Do not share hands you do not want to make public.
• Server and security data: to prevent abuse we temporarily process technical connection data (e.g. IP address for rate limiting) and server logs. The web server’s access logs (including IP address) are rotated and deleted after about 30 days.
• Audience measurement (without cookies): when you open a page, we record the page, the website you came from (domain only), the language and the device type (desktop/mobile/tablet). IP address and browser identifier are not stored; they are only combined with a randomly generated value that changes daily into a shortened checksum that can no longer be linked to a person after 48 hours at the latest. No cookies are set and nothing is stored in your browser; recognizing you across days is not possible. If your browser sends “Do Not Track” or “Global Privacy Control”, we record nothing.

4. Purposes and legal bases

• Providing the account, licensing, payment processing and the related account emails — Art. 6(1)(b) GDPR (performance of a contract).
• Sharing hands at your explicit request — Art. 6(1)(b) GDPR (providing the function you triggered).
• IT security, prevention of abuse and fraud (e.g. rate limiting, device limits) — Art. 6(1)(f) GDPR (legitimate interest).
• Anonymous audience measurement to improve the website — Art. 6(1)(f) GDPR (legitimate interest).
• Compliance with legal obligations, where they exist — Art. 6(1)(c) GDPR.

5. Recipients and processors

• Stripe (payment service provider) — Stripe Payments Europe, Ltd. A transfer to the USA may occur; Stripe relies on EU standard contractual clauses for it.
• Hosting provider of our server ([Hosting-Anbieter und Standort]) for providing the website, API and database.
• Email delivery: account emails are sent through an email service provider ([E-Mail-Dienstleister, sobald festgelegt]).

We do not pass data on to other third parties unless we are legally required to.

6. Retention

We store account data for as long as your account exists. After the account is deleted, personal data is erased unless statutory retention obligations prevent it. Shared hands are deleted automatically after a period (default: 30 days; selectable with an account, currently up to 12 months). You can delete them earlier at any time, when signed in under “My shared hands” in your account, otherwise by email stating the link.

7. Cookies and local storage

We do not use tracking or marketing cookies. For signing in we store a technically necessary session token in your browser’s local storage (localStorage). If you choose the website language manually, we remember your choice in a technically necessary cookie (NEXT_LOCALE, lifetime 1 year).

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Contact kontakt@pokerhandtracker.com for this. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Changes and future operator

We update this policy when features or the legal situation change. If the project is operated by another party in future (for example a company or a partner), we will inform you beforehand; the new operator will then be the controller within the meaning of the GDPR.