Privacy policy

Who is responsible

Flopanda is responsible for the personal data described here. Questions and requests go to [email protected].

Without an account

Everything you do in the trainer (charts, results, rating, saved hands and settings) is stored in your browser’s storage on your device. We never receive it. The calculators, the hand of the day and the table on the start page run in your browser too: your cards and answers are not sent anywhere.

With an account

An account is free and optional. It stores:

• Your email address, to send sign-in codes and identify your account.
• Your training data: preflop charts, trained situations, results, rating, saved hands (including hand histories you upload) and settings, so that they sync between your devices.
• Technical data such as sign-in times and IP addresses, which our provider logs for security and troubleshooting.

The legal basis is contract: the data is needed to provide the account and the sync you asked for. We do not use it for anything else.

The leaderboard

The leaderboard is optional and needs an account. If you choose to join, your nickname, rating, highest rating and number of decisions are public on the leaderboard. Your email address is never shown. You can change your nickname or leave the leaderboard at any time; leaving deletes the row from the server at once. The legal basis is consent, which you give by joining and withdraw by leaving. Nicknames that break the rules are removed.

Anonymous counts

Playing 20 hands in the trainer on one day is counted once per day. The count records only that it happened, with the browser’s language and the campaign tag, and nothing about your hands, your answers or who you are. If your browser sends Global Privacy Control or Do Not Track, nothing is counted.

Who handles the data

Accounts, synced data and the anonymous counts are stored with Supabase on servers in the EU. Sign-in codes are sent through our email provider. The website is delivered by Cloudflare, which, like any web host, handles your IP address to do so. All three are processors: they may only handle the data on our behalf. Cloudflare is a US company and may handle data outside the EU, under the safeguards in its data processing agreement.

How long it is kept

Account data is kept for as long as you keep the account. If you delete it under Settings, Account, your email address and all synced data are removed from the server at once. Backups held by our provider are overwritten within 30 days.

Your rights

You can export your data as JSON at any time under Settings, Data, and you can delete your account yourself. You can also ask us for a copy of your data, or ask us to correct, delete or restrict it, and you can object to how we use it. If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY), or to the data protection authority where you live.

Cookies and storage

The trainer uses your browser’s storage for your data and, if you are signed in, to keep you signed in. This is needed for the service to work. The website sets no cookies and uses none for statistics or ads. The only other thing it stores is a note in your browser, so that 20 hands in a day is counted only once.