Privacy Policy

Placeholder draft · Last updated: 2026-10-18 · May change before the official version is published

Short version: no sign-up is required and your practice data stays in your own browser. We only store an email address if you choose to sign in with it or leave it when buying, and only to sign you in and recover license keys. Payment is completed over a blockchain network, and we never touch your wallet's private keys.

1. What we do (and don't) collect

No sign-up required: using Holdem Trainer Pro requires no account. We do not ask for your name, phone number or other personally identifying information.
Email sign-in (optional): on the account page you can sign in with a code sent to your email, to view and recover your license keys. We send a 6-digit code to that address (via Cloudflare's email service; only a hash of the code is stored and it expires in 10 minutes). After signing in, your browser gets a session cookie valid for 30 days (HttpOnly, used only to keep you signed in). The server indexes which license keys belong to which email using a salted hash.
Local data: your practice history, settings and license status are stored in your browser's localStorage and are not uploaded to our servers. Clearing your browser data deletes them.
When you buy: you may choose to leave an email address, which is used to generate and recover your license key (the email is written into the license key itself). You can also buy without leaving an email.
AI hand review: when you tap “AI review”, the record of that hand (hole cards, board, betting actions and computed numbers such as equity — no personal information) is sent to our server and passed to a third-party large-language-model provider to write the review. Reviews are cached by hand content for 30 days. Daily usage is counted against a hash of your license key or of your IP address (the raw IP is never stored), and the counters are deleted after 2 days.
Price display: to show an approximate price in your local currency, the server reads the two-letter country code supplied by the network. It is used only for that calculation and is not stored.
USDT payments: on the payment page you transfer funds to our receiving address. On-chain transfer details (transaction hash, amount, sending address) are public blockchain data, which our payment gateway reads to verify that the payment has arrived. Order records (order number, amount, time received) are kept on our servers to issue and recover license keys. We never touch your wallet's private keys.

2. Online play with friends (P2P)

Online games use WebRTC to transmit data peer-to-peer between players' devices; game content does not pass through a central game server. The signaling information required to establish a connection is used only for the handshake and for no other purpose. Please note: friends you play with can see the nickname you use at the table.

3. Anonymous usage statistics

This site does not use advertising cookies or any third-party analytics service (no Google Analytics, no PostHog, no external CDN scripts). To understand which steps of the product work well and where people drop off, we run our own self-hosted, privacy-first anonymous statistics:

Aggregates only, no individual records: the server keeps only same-day aggregate counts such as "how many times an action happened on a given day" (e.g. opening the app, starting the first hand, starting checkout). It does not store any individual event records.
An anonymous ID you can clear yourself: your browser generates a random anonymous ID locally (stored in localStorage), used only to de-duplicate counts within the same day. It is not a fingerprint and is not linked to your identity; the server stores only a one-way hash of it, never the original. Clearing your browser data resets it.
We never collect personal information: we do not send or store your email, license key, raw IP address, precise browser fingerprint or URL parameters. For location we keep only the two-letter country code supplied by the network (such as CN or US) and never record the raw IP; for devices we distinguish only the rough category "desktop / mobile".
We respect "Do Not Track": if your browser has Do Not Track (DNT) enabled, this site's statistics stay completely silent and send no data at all.

In other words, this data cannot be used to identify you personally and is used only to improve the product experience.

4. Data security and retention

Because data is stored local-first, you can delete all of your practice records at any time by clearing your browser data. The minimum records necessary for issuing license keys (email, order number, license key) are retained for after-sales support. To have your email and related records deleted, email us.

5. Minors

This product is a poker practice tool and does not offer purchases to users under the age of 18.

6. Contact us

For privacy questions, please contact: support@depu.app.