My Poker Gym Privacy Policy
Last updated: 12 October 2026
This Privacy Policy explains how My Poker Gym (“we,” “us,” “our”) collects, uses and shares information when you use My Poker Gym at mypokergym.com (the “Service”).
C.B.A. Services LLC, builder of My Poker Gym, is a Delaware LLC.
My Poker Gym is a poker training and education tool. It does not offer real-money gambling, wagering, deposits or prizes.
1. Information we collect
1.1 Information you give us
- Email address. We collect it when you sign up or sign in. Sign-in is passwordless: we email you a one-time link. We do not collect or store a password.
- Communications. If you contact us, we keep the content of your messages and your contact details.
- Payment information (when paid plans launch). Payments will be processed by Stripe. We do not receive or store your full card number. We may receive limited billing details from Stripe, such as:
- your name and billing country or postal code
- the last four digits and brand of your card
- your subscription status and transaction history
1.2 Information created when you use the Service
- Training data. If you are signed in, this is stored in your account and synced across your devices. It includes:
- hands you play
- decisions and how they were graded
- saved spots
- statistics, such as accuracy by street and position, equity estimates and range reads
- practice settings
- Free-hand limit data. Visitors who are not signed in can play a limited number of free hands. The limit applies per device and per network IP address. To enforce it, we record:
- a randomly generated device identifier stored in your browser
- your IP address
- the number of free hands played from that device and IP address
- Technical and log data. Our hosting and backend providers automatically receive standard request data. This includes IP address, browser type, device type, pages requested, timestamps and error logs.
1.3 Information we do not collect
We do not knowingly collect:
- government ID numbers
- precise geolocation
- bank or gambling account details
- information about your real-money poker play
Please do not include sensitive personal information in support messages.
2. How we use information
We use information to:
- provide the Service, including sending sign-in links, saving and syncing your progress, and grading decisions
- enforce the free-hand limit and prevent abuse
- process subscriptions, payments, renewals and refunds (when available)
- send service messages, such as sign-in links, receipts, billing notices and important changes
- with your consent where required, send product updates or training tips, which you can opt out of at any time
- analyze usage, fix bugs and improve the Service
- protect the security of the Service, comply with law, and enforce our Terms of Service
We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under California law).
Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we rely on:
- contract: providing the Service and subscriptions
- legitimate interests: free-hand limits, security, abuse prevention and product improvement
- consent: optional marketing emails and non-essential cookies or analytics, where required
- legal obligation: tax and accounting records
3. How we share information
We share information only with service providers (“processors”) who help us run the Service, under contracts that limit their use of it:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication (email sign-in links), database for training data, free-hand-limit checks | Email, account ID, training data, device ID, IP address |
| Netlify | Website hosting and content delivery | IP address, request logs |
| Stripe (when paid plans launch) | Payment processing, subscription billing, fraud prevention | Billing and payment details, email |
We may also disclose information:
- if required by law or valid legal process
- to protect the rights, safety and property of us, our users or others
- in connection with a business transfer, such as a merger, acquisition or sale of assets, subject to this Policy
- with your consent
Some providers process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses.
4. Data retention
| Data | How long we keep it |
|---|---|
| Account and training data | While your account is active. |
| Billing records | As long as required for tax, accounting and legal purposes (typically 7 years) |
| Logs and analytics | Per provider defaults, generally no longer than 24 months |
We may keep limited information longer where needed to resolve disputes, prevent abuse or comply with law.
5. Cookies and local storage
The Service uses your browser’s local storage, and similar technologies, to make it work:
- Sign-in session: keeps you signed in (set by Supabase).
- Settings and progress: your practice settings, and your saved spots and stats if you are not signed in.
- Free-hand count and device identifier: used to apply the free-hand limit.
These are strictly necessary for the Service.
If we enable an analytics provider, it may set cookies or identifiers. Where the law requires consent, we will ask before setting non-essential cookies.
You can clear local storage and cookies in your browser settings. Doing so will sign you out, and you will lose any progress not saved to an account.
6. Your rights and choices
Depending on where you live (for example, under the GDPR, UK GDPR, or California CCPA/CPRA and other US state privacy laws), you may have the right to:
- access the personal information we hold about you
- correct inaccurate information
- delete your information and account
- receive a copy of your data in a portable format
- object to or restrict certain processing
- withdraw consent at any time, where we rely on consent
- opt out of marketing emails, using the unsubscribe link or by contacting us
- not be discriminated against for exercising your rights
How to make a request: email support@mypokergym.com from the address linked to your account. We may need to verify your identity. We will respond within the time required by law, typically 30 to 45 days. You may also use an authorized agent where permitted.
If you are in the EEA or UK, you may complain to your local data protection authority.
7. Children and age requirement
The Service simulates poker, a gambling-themed game, though no real money is involved. The Service is intended only for people 18 or older (or the age of majority where you live, if higher).
We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact support@mypokergym.com and we will delete it.
8. Security
We use reasonable technical and organizational measures to protect information, including:
- encrypted connections (HTTPS)
- passwordless sign-in
- access controls on our database, designed so each user can access only their own data
- reputable infrastructure providers
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep access to your email account secure, because it controls sign-in to your My Poker Gym account.
9. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new “Last updated” date. If changes are material, we will give reasonable notice, for example by email or a notice in the Service.
10. Contact us
My Poker Gym
Email: support@mypokergym.com
See also our Terms of Service.