Privacy Policy

1. Who we are

This policy describes how pokr ("we", "us", "the Service") collects, uses, and protects personal information when you use our poker platform.

2. Information we collect

We collect only what's needed to run the Service:

• Google account data — your Google user ID, email, display name, and avatar URL returned by Google Sign-In.
• Profile data — an optional username you choose.
• Gameplay data — clubs you join, tables you sit at, hands you play, actions (fold/check/call/raise), stacks, pots, and session audit events.
• Transactions — virtual-chip buy-ins and cash-outs internal to each club.
• Cosmetics and uploads — your cosmetic access and equipped items, the cropped image you upload as a card back, the audio clip you upload as a victory sound, and their dimensions or duration and upload timestamps.
• Purchase records — your account and order IDs, selected item and country, Xsolla order and transaction IDs, payment or refund status, amounts, currency, and timestamps. We retain a hash and basic receipt details from payment notifications, rather than the full notification body. We also store the checkout link while a payment is pending. pokr does not store full card numbers or card security codes.
• Technical data — IP address, browser user-agent, and server logs for security, abuse prevention, and debugging.
• Acceptance records — the version of Terms/Privacy you accepted and the timestamp of acceptance.

3. How we use it

• to authenticate you and keep your session active;
• to run games, track balances, and display hand history;
• to process cosmetic orders, confirm payments and refunds, and maintain access across clubs;
• to display your equipped cosmetics and deliver uploaded images and audio to table participants;
• to investigate fair-play concerns, bugs, and disputes;
• to comply with legal obligations when required.

We do not sell your personal information, and we do not use it for advertising.

4. Who sees your data

• Other players see your username, avatar, and public gameplay actions at shared tables. They also see your equipped visual cosmetics and custom card backs, and may hear your victory sound, subject to their audio settings.
• Club owners and managers see membership status, balances inside their club, and session records for their tables.
• Platform admins see all data necessary for fraud investigation and support.
• Service providers (hosting, database, Google sign-in) process data on our behalf under their own terms.
• Xsolla receives your pokr account ID, email, username or display name, selected country, selected item and quantity, and order reference when you open checkout. Xsolla collects payment information through its checkout and sends us payment and refund notifications so we can manage your cosmetic access. Its handling of personal data is described in the Xsolla Privacy Policy.

Uploaded sounds and card backs are delivered through media links that do not require the viewer to sign in. Anyone who obtains a working link can access that upload while its owner has access to the feature. Do not upload content you intend to keep private. Unequipping stops its use at tables but does not delete the file or disable its link.

5. Retention

Account and hand-history data is retained while your account exists and for a reasonable period after closure for audit and legal purposes. Server and security logs are retained for a limited rolling window. Purchase and payment records may be retained as needed for accounting, refunds, disputes, fraud prevention, and legal obligations, including after account closure.

Replacing an upload removes the previous version from active storage and changes its media link. Deleting an upload removes it from active storage and disables its link. Copies may remain in backups until those backups are rotated; deletion does not erase copies already downloaded or recorded by other people.

6. Security

We use HTTPS, signed JWT tokens, hashed references where applicable, and role-based access controls. No system is perfectly secure; you are responsible for keeping your Google account safe.

7. Your choices

You can update your profile at any time from the profile page. You can request account deletion by contacting us; note that hand history associated with other players' sessions may be retained in anonymised form for fairness and audit purposes.

In the shop, you can unequip cosmetics and replace or delete your custom sound and card back. You can also mute custom victory sounds in your audio settings. For payment records held by Xsolla or help with a purchase, contact Xsolla Support.

8. Children

The Service is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

9. International users

Data may be processed in jurisdictions other than the one you live in. By using the Service you consent to this transfer.

10. Changes

We may update this policy. After material changes, we ask you to acknowledge the current version when you sign in again and before a cosmetic purchase.

11. Contact

For privacy questions or account deletion requests, email support@pokr.live.