Privacy Policy
PokerPall is operated by Puredata OÜ, a company registered in Estonia, EU - subject to GDPR. The web tools and the mobile app have different data profiles; select one below.
What we collect and why
The Settlement Calculator and Chip Calculator run entirely in your browser. Player names, buy-ins, chip counts, and any other values you type into the calculators are never sent to our servers. The list below covers every type of data that does leave your browser.
- Anonymous usage analytics (opt-in) - if you accept the analytics cookie in our consent banner, we use PostHog (EU region) to record anonymous events like pageviews, which calculator you opened, and whether you clicked a store badge. PostHog stores a first-party cookie and a matching
localStorageentry containing a randomly generated visitor ID so we can tell repeat visits from new ones. We do not link this ID to any personal data. IP addresses are discarded at ingestion before storage. If you reject or ignore the banner, no analytics events are sent and no analytics cookie is set. You can change your choice at any time via the "Cookie preferences" link in the footer. - UTM parameters on outbound store links - links to the Google Play Store and Apple App Store are tagged with non-personal UTM parameters (source, medium, campaign) so we can attribute app downloads to the page and CTA position. These tags contain no identifiers about you.
- Hosting metadata (Cloudflare) - pokerpall.com is served via Cloudflare. Cloudflare logs anonymised request metadata (IP address, URL, timestamp) at the network layer for security and performance, retained per Cloudflare's own policy. See cloudflare.com/privacypolicy.
Local storage
The Chip Calculator saves your denomination set locally using your browser's localStorage so your setup persists between visits. This data stays on your device only; we cannot read it. localStorage is not a cookie and is strictly necessary for the feature you invoked, so it does not require consent under the ePrivacy Directive.
Advertising and cookies
We set a strictly necessary first-party consent cookie to remember whether you accepted or rejected analytics. If you accept analytics, PostHog may also set the optional analytics cookie described above. Once approved by Google, we will display ads on the free web tools via Google Ad Manager (GAM), with AdSense demand linked for fill. Google's ads may use cookies and your advertising identifier to serve and measure them. You can read how Google uses data from sites that run its ads in Google's partner sites notice. Before serving any ad to EU/UK users, Google's certified consent message (Funding Choices / Privacy & messaging) will collect your consent on our behalf, and you can change your choice at any time via the link Google shows. Visitors outside the EU and UK can manage ad personalisation directly at Google Ad Settings. At the time of writing, no ads are being served on pokerpall.com.
What we do not collect
- We do not collect your name, email address, or any contact information
- We do not store calculator inputs or results on our servers
- We do not sell your data to any third party
- We only set a strictly necessary consent cookie, plus the optional analytics cookie if you accept it. Ad cookies set by Google after consent are governed by Google's policy.
Third-party processors (web)
| Processor | Purpose | Location | Policy |
|---|---|---|---|
| Cloudflare | Hosting and CDN | Global edge | cloudflare.com/privacypolicy |
| PostHog | Anonymous usage analytics | EU | posthog.com/privacy |
| Google Ad Manager | Advertising (pending approval) | USA | policies.google.com/privacy |
Lawful basis for processing
Under Article 6 GDPR, the lawful basis for each type of processing we perform is:
| Processing | Lawful basis |
|---|---|
| Anonymous usage analytics on pokerpall.com (PostHog, cookie-based, opt-in) | Consent collected via our cookie banner (Art. 6(1)(a)) |
| Multiplayer session sync (Supabase) | Performance of the service you requested (Art. 6(1)(b)) |
| Non-personalised ads in the app (AdMob) | Legitimate interest in funding the free tier (Art. 6(1)(f)) |
| Personalised ads on pokerpall.com (GAM, once live) | Consent collected via Google's certified consent message (Art. 6(1)(a)) |
| In-app purchase verification (RevenueCat, App Store, Play Store) | Performance of the contract you entered into (Art. 6(1)(b)) |
| Hosting and security logs (Cloudflare) | Legitimate interest in service availability and abuse prevention (Art. 6(1)(f)) |
Data retention
- Multiplayer session data (Supabase) - deleted by a scheduled cleanup function within 24 hours of game end. Maximum lifetime is 24 hours from when the game ends.
- Anonymous web analytics (PostHog) - PostHog's default retention period applies (currently 12 months on our plan); we have not extended it. IPs are discarded at ingestion.
- Local data (app and browser) - retained on your device until you clear the app's storage, uninstall the app, or clear your browser data. We have no access to it and cannot delete it remotely.
- Cloudflare access logs - retained per Cloudflare's own retention policy for the free / pro plan; we have not configured a custom period. See cloudflare.com/privacypolicy.
- Subscription status (RevenueCat) - RevenueCat holds your anonymised purchase receipt for as long as the subscription is active, governed by RevenueCat's policy. The underlying tax / accounting records for the purchase sit with Apple or Google and Puredata OÜ's accounting system, not with you as a user, and are retained per Estonian accounting law.
International data transfers
Some of our processors (Google AdMob, Google Ad Manager, Apple App Store, Google Play, RevenueCat) are based in the United States. Transfers of personal data to these processors rely on the European Commission's Standard Contractual Clauses and, where the processor is certified, the EU-US Data Privacy Framework. Our EU-resident processors (Supabase Frankfurt, PostHog EU, Cloudflare with EU edge routing) are not subject to third-country transfers for our use of them.
Children
PokerPall is rated 18+ on both the Apple App Store and Google Play and is intended for adults. We do not knowingly collect or process personal data from anyone under 18. If you are a parent or guardian and believe a child has interacted with PokerPall in a way that involved their personal data, contact us at the address below and we will delete it.
Your rights under GDPR
As a data subject you have the right to access, rectify, or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at the address below. We will respond within 30 days.
Right to lodge a complaint
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), the supervisory authority for Puredata OÜ. Contact details: aki.ee/en. You may also lodge a complaint with the supervisory authority in the EU member state where you live or where the alleged infringement took place.
Changes to this policy
If we make material changes to how PokerPall handles your data, we will update this page and revise the effective date in the relevant panel header above. Continued use after a policy update constitutes acceptance of the revised terms.
Contact
For privacy questions or data deletion requests: info@puredata.ee. We respond within 30 days.