Privacy Policy

Last updated: · Español

Note: This is a technical draft aligned with the current app. Legal review is recommended before a commercial launch.

1. Data controller

Privacy contact:

2. What we process

Account: Google profile (sub, email, name, picture) via OAuth.
Anonymous landing funnel: a random visitor UUID and product events (viewed landing, started the 5-hand trial, hand reached, registered afterwards). No email or name.
Trainer data: hands played, decisions, EV estimates, cards in simulation.
Imported sessions: parsed hand history and GTO analysis (uploaded .txt).
Raw session files: stored only on your device (not synced to cloud).
ForgeCoach (optional): hand/session poker data you explicitly send after consent.
Push notifications (opt-in): browser push endpoint and subscription keys if you enable alerts in Settings. Payloads do not include hands, email or tokens.

3. Purposes and legal bases (GDPR)

Provide the service: contract performance.
Anonymous landing-to-signup funnel (first-party, no advertising cookies): legitimate interest in measuring the guest trial.
ForgeCoach: consent.
Push notifications: consent (toggle in Settings).
Non-essential analytics (if enabled): consent.

4. Processors

Google (login & AI), Supabase (database/sync), payment processor when subscriptions are live, GitHub Pages (hosting).

5. Your rights

Access, rectification, erasure, portability, restriction, objection. Use Export my data and Delete my account in the account menu, or email the controller.

6. Retention

While your account is active; deleted on account erasure (cloud + local on confirmation).