Privacy Policy

This Privacy Policy explains what information Dexas Holdem ("we", "us", "our") collects about you when you use our website and tournament timer application (the "Service"), how we use that information, and the choices you have. We aim to be straightforward and honest — if anything below is unclear, email hello@dexasholdem.com.

1. Summary

• You can use the timer with no account at all. Without an account, no personal data leaves your device.
• If you create an account, we store your email and the data you enter in the app (tournament settings, player roster, game history) so we can sync it across your devices.
• If you subscribe, we use Stripe to process your payment. We never see or store your card details.
• We don't sell your data. We don't run ads. We don't share data with anyone except the service providers required to run the product (listed below).
• You can export or delete your data at any time. Email hello@dexasholdem.com and we'll do it within 14 days.

2. Information we collect

2a. Information you give us

• Account information. Your email address and (if you sign up with password) a hashed password.
• App data. The data you enter while using the timer — tournament names, blind structures, player names, chip counts, game results, history. This is stored as a JSON object in your database row.
• Customisations. Optional dealer avatar images and background photos you upload.
• Support correspondence. Emails you send us, including any attachments.

2b. Information we collect automatically

• Technical data. Your IP address, browser type and version, operating system, language, screen size, and the pages you visit on our site. We use this to debug issues and to understand which features are used.
• Cookies and similar. See section 6.

2c. Information from third parties

• Stripe. When you subscribe, Stripe sends us your subscription status, billing interval, last 4 digits of your card, and renewal dates. Stripe stores all sensitive card data itself.

3. How we use information

We use the data we collect to:

• Provide the Service — show you the timer, sync your data between devices, save your game history.
• Run your subscription — bill you correctly, send receipts, let you cancel.
• Respond to support requests.
• Send transactional emails (welcome message, trial-ending reminder, receipt, password reset).
• Debug bugs and improve the product based on aggregate usage patterns.
• Comply with legal obligations (tax records, fraud prevention).

We will never use your data to train AI models without your explicit consent. We will never sell or rent your data.

4. When we share information

We share data only with the service providers required to run Dexas Holdem:

• Supabase (database + authentication) — stores your account and app data. Privacy policy.
• Vercel (web hosting) — serves the site and runs the serverless functions that handle Stripe webhooks. Privacy policy.
• Stripe (payments) — processes subscriptions, stores card details, sends receipts. Privacy policy.
• Cloudflare (DNS + CDN) — routes traffic to our servers. Privacy policy.

If you choose to use the optional ElevenLabs or OpenAI voice features by providing your own API key, your audio prompts and key are sent directly from your browser to those services. We never see or store your API key.

We may disclose your information if compelled by law (subpoena, court order), or to protect rights, property, or safety. We will notify you of any such request unless legally prohibited from doing so.

5. Where data is stored and for how long

Your account data is stored in Supabase's data centres (currently US-East). Your subscription data is stored by Stripe. Your hosting is via Vercel's global edge network.

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal/financial purposes (e.g., tax records — typically 7 years).

6. Cookies and similar technologies

We use a small number of cookies and local storage items:

• Essential. An authentication token from Supabase so you stay signed in, and your locally-cached game data so the app works offline.
• No third-party trackers. We do not use Google Analytics, Facebook Pixel, advertising cookies, or session replay tools.

Future updates may add privacy-friendly analytics (Plausible or Fathom). These do not use cookies and do not track individuals. We'll update this policy if/when they're added.

7. Your rights

Depending on where you live, you have some or all of the following rights:

• Access: get a copy of the personal data we hold about you.
• Correction: ask us to fix inaccurate data.
• Deletion: ask us to delete your account and data.
• Portability: get your data in a machine-readable format (we export as JSON).
• Object/Restrict: object to certain uses of your data.
• Withdraw consent: where we rely on consent, withdraw it at any time.
• Complain: lodge a complaint with your local data protection authority.

To exercise any of these rights, email hello@dexasholdem.com. We will respond within 30 days.

8. Children

Dexas Holdem is not intended for use by children under 13 (under 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy occasionally. The "Last updated" date at the top reflects when it was last changed. Material changes will be announced by email (if you have an account) and via a banner on the site. Continued use of the Service after changes means you accept the updated policy.

10. Contact

Questions, requests, or complaints:

Dexas Holdem
Email: hello@dexasholdem.com