Privacy policy
Last updated: 14 October 2026 · English translation of the Spanish original
Summary
| Controller | Daniel González Punzano ("PokerStudy"). Contact: pokerstudy.soporte@gmail.com |
|---|---|
| What for | To give you an account and provide the study service, to manage your Pro subscription if you take one out, and to invite you to test the app if you sign up as a tester (or to let you know about the launch if you joined the waitlist). |
| Legal basis | The contract you accept when you sign up; your consent for the testers list and the waitlist; our legitimate interest in the security of the service; and the legal (tax) obligations relating to payments. |
| Who with | Only the providers we need in order to operate (hosting, database, email and payments). We never sell your data or use it for advertising. |
| Your rights | Access, rectification, erasure, portability, objection and restriction of processing. From the app you can export your data and delete your account at any time. |
1. Who the controller is
Daniel González Punzano, Spanish tax ID (NIF) 48757126R, with address at Calle Ciutat de Valencia 25, piso 1, puerta 1, 03570 Villajoyosa (Alicante, Spain), is the controller of PokerStudy's data (pokerstudy.app and app.pokerstudy.app). For any privacy matter, write to pokerstudy.soporte@gmail.com.
2. What data we process
If you create an account
- Login details: your email and your password, which is stored encrypted (hashed): nobody, not even us, can read it. If you sign in with Google, we receive your name, email and profile picture from Google; we don't ask for access to anything else in your Google account.
- Profile and preferences: the display name you choose, your theme, card style, action colours and language.
- Your study content: the ranges and trees you create or import, your answers and review history, your progress in Mental Maths and your notes.
- Your playing records: the sessions, tournaments and bankroll adjustments you log (amounts, dates and results). We only use them to show you your own statistics.
- Notes on other players: if you save notes or avatars of opponents, we ask you to use aliases and not real names, photos or any data that could identify another person. Those notes are yours and only you can see them.
If you use Rewards
- Invitations: your personal code and, if you sign up with someone else's, who invited you. Whoever invited you only sees how many friends have joined, never who you are. To know whether an invitation counts, we record the days on which you use the app (only the date, not what you do).
- Rewards: the ones you have, when you activate them and when they expire.
- Your feedback and surveys: the rating and text you send us. We only use them to improve the app.
- Email fingerprint when you delete your account: if you delete your account, we keep an encrypted, irreversible fingerprint of your email (not the email itself). It is only used to prevent the free trial being repeated, or invitation rewards being obtained, by deleting and creating accounts again.
If you take out Pro
Payment is handled by Paddle (see section 5). We never see or store your card details: we only receive from Paddle what is needed to activate your plan (customer and subscription identifiers, plan, status, renewal dates, country and email).
If you sign up as a tester (or joined the waitlist)
Your email, which button you signed up from, the language of the page and, on the old waitlist, whether you showed interest in Pro.
Technical data
Like any website, our servers receive your IP address and technical data from your browser. We only use them to make the service work and to protect it from abuse (for example, by limiting repeated login attempts). Our providers' technical logs are deleted automatically within a few days or weeks.
3. What for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and maintaining your account and providing the service (study, statistics, syncing between devices). | Performance of the contract (the terms of use). |
| Managing your Pro subscription, the trial period, gift codes, rewards and invitations, and the free plan's limits. | Performance of the contract. |
| Reading your feedback and survey answers to improve the app. | Your consent, when you send them (they are voluntary). |
| Sending you emails the service needs (confirming your email, recovering your password, notices about your subscription or important changes). | Performance of the contract. |
| Inviting you to test the app and its new features before anyone else (testers list, for example the closed test of the Android app on Google Play) and, if you joined the old waitlist, letting you know about the launch and the founders' offer. | Your consent, which you can withdraw whenever you want. |
| Security and prevention of abuse and fraud (including the email fingerprint of deleted accounts). | Legitimate interest in protecting the service and its users. |
| Meeting legal obligations (for example, tax obligations on payments). | Legal obligation. |
We don't make automated decisions with legal effects on you. The app does adapt your reviews to your answers (spaced repetition), but that only decides what you study and when.
4. How long we keep it
- Account data and content: for as long as you have the account. If you delete it from the app, it is removed from the database immediately; backups are rotated and disappear within 30 days at most.
- Email fingerprint of a deleted account: 3 years from deletion.
- Inactive accounts: if a free account isn't used for 24 months, we will email you and, if you don't reply, we will delete it.
- Testers list and waitlist: until we remove you (you can ask at any time) or, at most, 12 months after the launch.
- Billing data: Paddle keeps it for as long as tax law requires, as the seller responsible for those transactions.
5. Who we share data with
Only with providers that process data on our behalf (processors), under contracts that oblige them to protect it and not to use it for anything else:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and user accounts (sign-in). | European Union (Ireland). |
| Render | Application servers. | European Union (Frankfurt). The app's web files are served from its global delivery network. |
| Cloudflare | Serving the pokerstudy.app website and counting its visits in aggregate (Web Analytics, no cookies). | Global network; US company. |
| Resend | Sending the service's emails. | United States. |
| GitHub | Storing the daily database backups, encrypted (deleted after 30 days). | United States. |
| Only if you choose "Continue with Google" to sign in. | United States. |
Paddle (Paddle.com Market Ltd.) is our reseller: it is the one that sells you the subscription and takes the payment, acting as an independent controller of the payment data under its own privacy policy.
When a provider processes data outside the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.
Beyond this, we would only disclose data if a law or a competent authority required it.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given:
- From the app (My account): export all your data to a file, change your details and delete your account. It's free on any plan.
- By email: by writing to pokerstudy.soporte@gmail.com from your account's email address. We will reply within one month at most.
If you believe we haven't handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Minimum age
PokerStudy is only for adults aged 18 and over. If we find out that an account belongs to a minor, we will delete it.
8. Cookies and local storage
We don't use advertising or analytics cookies. To know how many visits the pokerstudy.app website gets we use Cloudflare Web Analytics, which sets no cookies, stores nothing in your browser and does not identify you: it only gives us aggregate figures (page views, country, device type and which website you came from). The app stores in your browser (local storage) only what is essential for it to work: your signed-in session and some display preferences. As this is strictly necessary for the service you request, it doesn't require your consent or a cookie banner. If we ever add something that does, we will ask you first.
9. Security
All communications are encrypted (HTTPS), passwords are stored encrypted and each account can only access its own data. No system is invulnerable: if there were ever a breach affecting your data, we would notify you and the supervisory authority as the law requires.
10. Changes to this policy
If we change anything important, we will let you know by email or inside the app before it takes effect. The date above shows the latest version.