Privacy policy

This policy summarizes what Hero Poker collects, why, and how to get it back or remove it. Hero Poker is play-money only — there are no real-money balances and nothing to cash out.

Who is responsible

The controller for your data is iRONic Ventures UG (haftungsbeschränkt), Essener Str. 13, 10555 Berlin, Germany. Full company details are in the imprint. For anything in this policy, write to hello@playheropoker.com.

What we store

• Your name, email, and avatar URL from Google sign-in.
• Your timezone and locale so session timestamps make sense to you.
• Your confirmation that you are 18 or older, and when you gave it.
• Your IP at sign-in, kept briefly for abuse and fraud signals.
• Hand histories, session summaries, and the analysis we generate from them. This is the product — without it we can't show you your stats or the things to work on.
• If you subscribe to Pro: your subscription status and its identifiers. Not your card.

What we don't store

• Card and payment details. Polar is the merchant of record and handles payment entry on their own systems; we receive whether your subscription is active, not how you paid.
• Real-money wagers or balances. Chips are play money and have no cash value.

Why we're allowed to (legal bases)

Most of what we do rests on our contract with you (Art. 6(1)(b) GDPR): you asked for a poker training product, and accounts, hand histories, stats and coaching are what delivering it requires. A smaller set rests on our legitimate interests (Art. 6(1)(f)) — keeping the service secure, spotting abuse, and the brief IP retention above. Where something genuinely needs your consent, we ask for it rather than assuming it.

Who else sees it

These are the processors we use, and the only reasons we use them:

• Google — sign-in.
• Polar — subscription billing and payment, as merchant of record, only if you upgrade.
• Azure OpenAI — post-session analysis. Hand summaries are sent for coaching; your name and email are not.
• Resend — transactional email, such as your data export or a deletion confirmation.
• Our hosting provider — the servers and managed database this app runs on, inside the EU.

Cookies

Hero Poker sets only the cookies it needs to keep you signed in and to protect sign-in forms. There is no advertising, no analytics, and no third-party tracking, which is why you do not see a consent banner — there would be nothing to consent to. One short-lived cookie also carries your 18-or-older confirmation from the sign-in page through Google and back. If we ever add analytics or an embed that sets its own cookies, this section changes and a consent request comes with it.

How long we keep it

Account data stays until you delete your account. When you do, it is soft-deleted for 24 hours so you can change your mind, then permanently purged. IP addresses captured at sign-in are kept only briefly for abuse signals.

Your controls

• Export your data at any time from settings. You get a JSON dump with every session, hand, and analysis we have on file.
• Delete your account at any time from settings, with the 24-hour grace window described above.
• You can also ask us to correct data, object to processing, or restrict it — write to the address above and we will answer.

If you're unhappy with how we handled it

You can complain to a data protection supervisory authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), and you can also go to the authority where you live. We would rather you told us first, but you do not have to.

Contact

Privacy questions go to hello@playheropoker.com. This policy will be updated as Hero Poker grows.