~/solpoker > cat privacy.md

PRIVACY

> what we store about you, why, and for how long. we keep it short because we keep little.

draft for counsel review · last updated 2026-10-14 · terms · privacy · responsible gaming · discord ↗

1. who holds your data

[Operating company name, registration number and address — to be completed by counsel] operates solpoker.club and is the data controller. Questions about this policy go to the Discord support channel or to the contact address counsel adds here.

2. what we collect
  • Account: your username, a salted password hash (never the password), your account token, your deposit address and its encrypted key, tickets, and your ledger (every deposit, buy-in, prize, withdrawal).
  • Play: hand histories, including your hole cards for hands you played, chat messages and emotes at the table, and tournament results. Hand histories are public except hole cards that were never shown.
  • Technical: IP address and country at connection time, used for rate limiting, abuse prevention (linked accounts, collusion review) and geo-restriction. The last eight addresses per account are kept with first/last-seen times; they are visible only to operators and never to other players. Cloudflare processes requests on our behalf.
  • On-chain: deposits and withdrawals are public Solana transactions by nature.
  • We do not collect an email address, a phone number, your name, or payment card details. If identity verification becomes required for licensed real-money play, a separate notice will explain what is collected and by which provider.
3. why we use it
  • To run the games, pay prizes and process withdrawals (performance of the contract).
  • To detect collusion, multi-accounting and bots, and to enforce the terms (legitimate interest).
  • To meet legal obligations once licensed: age and jurisdiction checks, records retention.
  • We do not sell personal data and we do not use it for advertising.
4. where and how long
  • Game and account data live in Cloudflare Durable Object storage. Backups are kept for recovery.
  • Ledger entries are kept for as long as the account exists and thereafter as required by law. Public hand histories are kept for 30 days by default. Chat is kept with the hand log.
  • Your browser stores your account token, screen name, deck and sound preferences, the age confirmation and an unsent chat draft in local storage. Clearing site data removes them; without your password that may lock you out of the account.
5. your rights

You can ask for a copy of your data, correction of your username, or deletion of your account. Deletion removes the account and its login; ledger records needed for accounting or legal reasons are retained in pseudonymised form. Public hand histories cannot be deleted because other players rely on them for verification.

6. cookies

We set no tracking cookies. Cloudflare may set strictly necessary cookies for security. Local storage is used only for the items listed above.

7. changes

Changes are announced on the site and Discord before they take effect. Counsel will add the legal basis, supervisory authority and retention schedule required by the licensing jurisdiction.