PokerOS
Privacy Policy
Last updated 29 August 2026
This explains what PokerOS collects, why, and what you can do about it. It is written to be read, not to be survived. Where organizers and players are treated differently, it says which is which.
01Who is responsible for what
For an ORGANIZER's own account, PokerOS is the controller of that data. For a club's PLAYERS, the club is the controller and PokerOS is a processor acting on its instructions. In practice: we hold the data, the club decides what happens to it. If you want your data at a club removed, ask the club; if they ask us, we will do it.
02What we collect from organizers
Your email address and a hashed password. Your name, if you give one. The club you run, its venues, its staff and their roles. Billing records: what you bought, when, and how much. Card numbers are handled by Stripe and never reach us. Technical records needed to run the service: request logs, error reports, and the rate-limit counters that stop a sign-in page being brute-forced.
03What we collect from players
Your phone number and a hashed PIN. That pair is your account. Your name, country, date of birth, email address and profile photo, if you give them. Only the phone number is required. A date of birth is collected because poker has an age floor and a club has to be able to answer for it; we store the date, never a copy of a document. What you did at the tables: which events you registered for, where you sat, how you finished, what you won. This is the record the club keeps of its own games. Photos a club adds to your player record, where it has that feature turned on.
04What we do not collect
No card numbers. No identity documents. No location beyond the country you choose. No advertising identifiers, no third-party trackers, and no analytics that follow you off PokerOS. We do not sell data. There is no arrangement under which we could.
05Why we hold it
To run the games you took part in, and to show you and your club the record of them. To take payment from organizers. To keep the service up and to stop abuse. To meet accounting and legal obligations. That is the whole list. If we ever want to use your data for something not on it, we will ask first.
06Who else sees it
The club you played at, and its staff, see your registration and your results. That is the point of the product. Other clubs do not. A player's history is shown to a club only for the games that club ran. Our suppliers see what they need to do their job and nothing more: Neon (database hosting, Singapore region), Vercel (application hosting), Stripe (card payments), and an email provider for the mail the service sends. Each is bound by contract to process only on our instructions. We will disclose data to an authority only where the law requires it, and we will tell you unless we are forbidden to.
07Where it is held, and for how long
Data is stored in Singapore (ap-southeast-1). A player account is kept while it is in use. Tell us to delete it and we will, except where a club must keep a record of a game for its own accounting. A closed club's data is deleted within 90 days. Billing records are kept for as long as tax law requires.
08Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. A player can do the first two from their profile at any time. Where the club is the controller, we will pass your request to them and help them answer it. We answer requests within 30 days. If we cannot do what you ask, we will tell you why.
09Security
Passwords and PINs are hashed, never stored in a readable form. Sessions are signed and expire. Traffic is encrypted in transit. No system is perfect. If data is exposed in a way that puts you at risk, we will tell the affected clubs and players, and the relevant authority, as the law requires.
10Cookies, and contacting us
PokerOS sets cookies to keep you signed in and to remember your language. There are no advertising or tracking cookies, which is why there is no consent banner to dismiss. Questions, requests, or a complaint: legal@pokeros.app. If we cannot resolve it, you may complain to the data protection authority where you live.
Questions about any of this? legal@pokeros.app