1. Who we are

nobspoker is run from Victoria, Australia. For anything about your privacy, contact us at support@nobspoker.com.

2. What we collect

When you play as a guest: a random guest identifier, a display name, a session cookie, and your country, worked out from your connection. We don't store your precise location.

When you create an account: your email address, username and password. We store your password only in a scrambled (hashed) form that can't be turned back into the password. If you sign in with Google or Apple, we receive an account identifier and the email address they share with us, not your password.

Your age: that you confirmed you're 18 or older, and when. If you give your date of birth to confirm, we check it and don't store it.

When you play: the hands you play (cards dealt, actions, results and chip movements) for your hand history, replays, statistics, fairness checks and leaderboards; your chip balance and its history; rewards you claim; ranked runs; clubs, scheduled games and RSVPs; cosmetics; saved games; chat messages from account holders, kept so reported messages can be reviewed; and any reports you make.

When you buy something: what you bought, the price, and the payment's status and reference. We never receive or store card details; Stripe collects them under its own privacy policy. We also keep your spending limits and any breaks you take.

To keep the game fair and secure: a device identifier (a random value in a cookie, stored by us only in hashed form) that enforces one free-chip claim per device, keeps one account per device at ranked tables and helps spot collusion; your IP address, linked to that identifier; failed sign-in attempts; and records of unusual activity, such as chips moving one way between two accounts, plus the actions our staff take, kept in an audit log.

Usage analytics: events such as “hand completed”, with small details like an amount, recorded against a scrambled version of your account identifier, never your email or name. We don't use third-party advertising or tracking tools.

3. How we use it

To run the games and your account; to confirm your age where required; to send account emails; to process purchases and apply your spending limits and breaks; to keep games fair and stop cheating, fraud and abuse; to moderate chat; to answer support requests; to improve the Service using analytics; and to meet our legal obligations. We don't sell your personal information or use it for targeted advertising. We don't send marketing emails.

4. Cookies and storage on your device

• oh_session: Keeps you signed in (90 days). Essential.
• oh_device: Device identifier for free-chip limits and fair play (about 13 months). Essential.
• oh_return: Remembers where to take you back to after signing in (15 minutes).
• oh_oauth: Protects Google or Apple sign-in while it completes (10 minutes).
• Your browser's local storage keeps your settings (sound, haptics, chat filter and similar), your guest name, and tips you've dismissed. It stays on your device.

We don't use advertising cookies.

5. Who we share it with

Only service providers who help run nobspoker, and only what they need:

• Cloudflare: Hosting the website, our database, hand replays, analytics and forwarding support email. Global network; our database and replays are set up in the Oceania region.
• Fly.io: Running the game server. Sydney, Australia.
• Resend: Sending account emails (confirmation and password reset). United States.
• Stripe: Card payments and Supporter subscriptions. United States and other countries.
• Google, Apple: Sign-in, only if you choose them. United States.

Other players see your username, avatar frame and emotes, your actions and the cards you show at a table, your chat messages, club membership and RSVPs, and leaderboard results. Your hole cards are visible to others only if you show them at showdown.

We may disclose information if the law requires it, or to protect players or the Service. Some of the providers above store or process information outside Australia, mainly in the United States. We use providers with strong security and privacy commitments, but overseas laws may differ from Australia's.

6. How long we keep it

• Account, chip and purchase records: while your account is open, and afterwards for as long as we need them for tax, accounting and legal reasons (generally up to 7 years).
• Hand history, replays and chat: while your account is open; reported messages until the report is resolved.
• Analytics events: up to 3 months.
• One-time links in emails expire after 24 hours (account confirmation) or 1 hour (password reset).

When you close your account, we delete or anonymise your personal information except what we must keep by law.

7. Security

Information is encrypted in transit. Passwords, sign-in tokens and device identifiers are stored only in hashed form, and only our data service can reach the database. Repeated wrong passwords lock an account for 15 minutes. Staff access is limited to administrators, and staff actions on accounts are recorded in an audit log. No system is perfectly secure; if a breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner as the law requires.

8. Your choices and rights

• Access and correction: ask us at support@nobspoker.com for a copy of your information or to correct it.
• Closing your account: ask us at support@nobspoker.com. We'll confirm it's you, then delete or anonymise your information as described above.
• Complaints: contact us first. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

9. Children

nobspoker is for adults (18+). We don't knowingly collect information from anyone under 18. If you believe a child is using it, contact us at support@nobspoker.com and we'll close the account.

10. Changes

We'll update this policy when our practices change, show the date at the top, and tell you about significant changes before they apply. See also our Terms of Use.