Privacy Policy

This Privacy Policy describes how PokerRoll ("we", "our", "the application") collects, uses and protects your personal data when you use our poker bankroll management application available at pokerroll.app and related services (web and mobile).

By using PokerRoll you accept the practices described in this policy. If you do not agree, please do not use our services.

The data controller is PokerRoll. You can contact us at: contact@pokerroll.app.

We collect only the data necessary to provide and improve our services:

Account data: e-mail address and name (or identifier) from Google when you sign in with Google OAuth; we do not store your Google password.

Session and bankroll data: data you enter in the app (sessions, buy-ins, rebuys, cash-outs, bankroll entries, goals, notes) to provide bankroll tracking and statistics.

Technical data: IP address, browser/device type, language preferences and similar technical data for security and correct operation of the service.

We do not collect sensitive payment card data; any payment-related data is handled by third-party payment providers if we introduce paid features in the future.

We use your data to: provide and maintain the service; authenticate you and manage your account; store and display your sessions and bankroll; calculate statistics and analytics you request; send important service-related messages (e.g. security or policy changes); improve the application and fix errors; and comply with legal obligations.

We do not use your session or bankroll data for advertising or selling to third parties.

If you are in the European Economic Area (EEA) or UK: we process your data on the basis of contract performance (providing the service you use), legitimate interests (security, improvement, analytics), and where required by law. Where we rely on consent, we will ask for it explicitly.

We retain your account and session data for as long as your account exists. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we must retain it for legal or security reasons.

Technical logs may be kept for a limited period for security and troubleshooting.

We use essential cookies and local storage for authentication, session management and preferences so the application works correctly. We may use analytics cookies to understand how the app is used and to improve it. You can control non-essential cookies through your browser settings.

We use trusted third-party services: Google (for sign-in and, where applicable, analytics), hosting and infrastructure providers to run the application. These providers process data according to their privacy policies and our instructions. We do not sell your personal data to third parties.

PokeAI is an optional AI coaching feature. It is switched off until you explicitly accept a separate notice describing what it can access; until then it processes nothing. The legal basis is your consent (Art. 6(1)(a) GDPR), recorded with a timestamp and the version of the notice you accepted, and withdrawable at any time from inside the feature.

When enabled, PokeAI reads your tracked sessions, results, bankroll entries and goals in order to answer with your own numbers. This access is technically scoped to your account and cannot reach another user's data. The assistant cannot change or delete your data. It saves one thing, and only at your request: sessions you send it to import (a CSV or Excel file, or pasted text) are shown to you as a preview and saved only when you press Save; you can take an import back, which deletes the sessions it saved.

PokeAI keeps short notes about what you are working on so a new conversation continues from the last one — for example a concept you find difficult, or how you tend to react after a losing session. These notes may constitute inferences about your behaviour. They never include your financial figures, which are read live at the moment of each question instead of being stored. You can erase these notes at any time, and withdrawing consent erases them automatically along with switching the feature off.

To generate answers, the content of your messages and the relevant context is sent to an external model provider (OpenRouter, routing to Google's Gemini models). This transfer may involve processing outside the European Economic Area under the provider's own safeguards. Conversations are stored in our database so you can return to them, and you can delete any conversation yourself.

When you import sessions, a file in a layout we recognise is read on our servers only. Pasted text, or a file whose columns we do not recognise, is sent to the same model provider so the sessions can be read: the text itself, or for a file only its column names and a few sample rows. The file is not stored; the sessions read from it are kept with the import, like sessions you log yourself, and are deleted with your account.

PokeAI is a study aid. It is not a financial adviser, not a tax adviser and not a therapist, and it does not replace professional help. Where a conversation suggests gambling-related harm, it will stop giving strategy advice and point to independent support services.

Friends is an optional feature for sharing your poker with people you know. You become friends only when both of you agree: through a private invite link or code, or an invitation to your exact username that you accept. There are no public profiles and no search by partial names, and you can turn off being found by username so that only your link adds you.

Friends see your username and profile picture, never your e-mail address or full name. Nothing else is shared until you choose to: you decide which finished sessions friends see (none, chosen ones or all of them, from now on or including earlier ones), for all friends or only some. A shared session shows its date, duration, game, stake, table, live or online, tournament name and type, field size and finishing position, number of rebuys and your result, either as an amount or only in buy-ins and ROI. Your notes, tags, staking details, tickets and import sources are never shared.

Two more settings are separate and off by default. If you join the friends leaderboard, friends who have also joined see your figures for the period (hours, number of sessions, ROI and, if you show amounts, profit and hourly rate), calculated from all your finished sessions, including those you have not shared. If you turn on "playing now", friends see that you are playing, cash or tournament, the stake and since when, but never the tournament name or any amounts.

Friends can react to sessions you share with an emoji from a fixed set and wish you good luck while you play; there are no comments or messages. You can mute, remove, block or report a friend; a report is sent to our team for review. Removing or blocking someone ends their access to everything at once and deletes what you shared selectively with each other and your reactions; deleting your account deletes all of it.

The legal basis for showing your data to friends is your consent (Art. 6(1)(a) GDPR), given through these settings. You can withdraw it at any time by changing them; sharing stops from that moment.

Depending on your location, you may have the right to: access your data; correct inaccurate data; request deletion of your data; request a copy of your data (portability); object to certain processing; withdraw consent where applicable; and lodge a complaint with a supervisory authority (e.g. in the EEA).

To exercise these rights, contact us at contact@pokerroll.app. You can also delete your account and associated data from the application settings where available.

We apply appropriate technical and organisational measures to protect your data (e.g. encryption in transit, access controls, secure hosting). No method of transmission over the internet is 100% secure; we strive to minimise risks.

For any questions about this Privacy Policy or your data: contact@pokerroll.app.

We may update this Privacy Policy from time to time. We will post the updated version on this page and indicate the date of the last update. Continued use of the service after changes constitutes acceptance of the updated policy. For material changes we may notify you by e-mail or in-app notice where appropriate.