Privacy Policy

WebPokerHud is a browser extension that shows you statistics about your own online poker play, with an optional paid analysis service. This policy describes what data we handle and what we do with it. The short version: your hands stay in your browser, we never store them on our servers, and we collect nothing unless you create an account.

Using the extension without an account

Hand histories captured by the extension are stored locally in your browser (IndexedDB) on your device. In the free tier with no account, nothing is sent to us: no personal data, no telemetry, no analytics. Uninstalling the extension or clearing browser data removes this local data; the export feature lets you back it up first.

Accounts

Signing in uses Google OAuth. We receive and store the profile Google shares: your email address, display name, and avatar image URL, together with your subscription state (plan and expiry). We use this solely to authenticate you and operate your subscription. We do not use passwords and never see your Google credentials.

Analysis requests

When you open the Analysis Panel, your locally stored hands are uploaded over HTTPS to our analysis server, processed in memory to compute your statistics, and the results are returned. Hand data is not stored on our servers — it exists there only for the duration of the request. Our operational logs record request metadata (hand counts, timings, subscription tier) for up to 30 days, never hand contents.

Payments

Pro is prepaid time paid in cryptocurrency, processed by NOWPayments. We never receive or store wallet keys or payment credentials. We keep purchase records (plan, amount, order and payment identifiers, status) to operate your subscription and for accounting. Cryptocurrency transactions are additionally recorded on public blockchains by their nature, outside our control. NOWPayments' own privacy policy governs the data they process.

Cookies and tracking

We run no advertising and no cross-site tracking. The website and extension use browser storage only to keep you signed in and to remember interface preferences.

Sharing

We do not sell or rent your data. It is processed by the infrastructure providers the service is built on — Supabase (accounts and database), Google Cloud (analysis server hosting), Cloudflare (website hosting and DNS), and NOWPayments (payments) — each only to provide their function. We would disclose data if legally compelled to.

Retention and deletion

Account and subscription data is kept while your account exists. To delete your account and its data, open a request on GitHub Issues; we will confirm you control the account before deleting, and we may retain purchase records where bookkeeping rules require it. Your hand data needs no deletion request — it was never on our servers.

Security

All transport is encrypted (HTTPS). Database access is scoped by row-level security so account data is readable only by its owner; payment fulfillment runs with verified, signed provider callbacks. No system is perfectly secure, but we designed this one to hold as little of your data as possible — the best protection for data is not having it.

Changes and contact

If this policy changes materially we will update the effective date above. Questions: open an issue on GitHub.