Privacy Policy

This policy covers:

• the Poker Room website at www.pokerroom.games,
• the iOS app “Poker Room · Texas Hold’em”, and
• the game server that both use (api.pokerroom.games).

Where the website and the app behave differently, we say which one we mean.

1. The short version

• You can play without an account. We don’t ask for your name or email address to play. All chips are play money with no cash value, and we don’t collect payment details.
• We give you a random player ID. Your browser or phone receives it the first time you play. Every hand you play is recorded on our server under that ID, together with your nickname — at live tables and against the AI.
• We record where you connect from. Our server stores the country, city/region and network operator that your IP address belongs to, how you first found us, and a short summary of which games you played. We do not store your IP address in our game database.
• Signing in is optional. If you sign in with Apple or Google, we receive your email address and name and use them to carry your record to other devices. We email you a weekly summary only if you tick the box for it.
• We use analytics and crash reporting: Google Analytics on the website, Google Firebase Analytics and Crashlytics in the app. In the EEA, the UK and Switzerland the website asks before setting analytics cookies. We don’t sell your data.
• The website shows ads from Google AdSense. Google may use cookies to personalise them; you can turn that off (see section 6). The app has no ads.
• You can delete your data yourself at any time with “Delete my data”. We keep the hand records, but without your ID, nickname or country, and use them to improve the game and its AI players.
• Who we are: Poker Room is run by Yoda Co., Ltd. in Japan. Questions go to hello@pokerroom.games.

2. Who is responsible for your data

Poker Room is operated by Yoda Co., Ltd. (洋田株式会社), which trades as Yoda Games Studio.

• Representative Director: Huanke Liu
• Address: 1-28-7-203 Okubo, Narashino, Chiba 275-0011, Japan
• Email: hello@pokerroom.games

We are the “controller” of the personal data described here — the company responsible for it.

3. What we collect and why

3.1 Your player ID and your support code

Your player ID is a random identifier created the first time you play.

• On the website it is kept in your browser’s local storage. In the app it is kept in the app’s own storage. It is our own random number, not Apple’s device identifier.
• Our server also keeps the same ID in a cookie called pr_id on api.pokerroom.games. The cookie is set by our own domain, can’t be read by scripts on the page, and lasts 400 days from your last visit. It keeps you the same player if your browser clears its storage.
• Your player ID works like a password. Anyone who has it can play as you and delete your data. That is why it is never shown in full anywhere in the website or the app. Never send it to anyone — including us.

Your support code looks like PR-1A2B-3C4D-5E6F-7A8B. On the website, open the account panel (click your player name in the live lobby) and choose “Copy my ID”. In the app, it is shown at the bottom of Settings as “Support code”. It is worked out from your player ID by a one-way calculation: it lets us find your data when you contact us, but it can’t be used to sign in or to act as you, and your player ID can’t be worked out from it.

Why we need the player ID: it tells us which hands, results, nickname and private tables are yours. The live tables and your history don’t work without it.

3.2 Nickname, avatar and table names

We store the nickname you type (up to 20 characters), the avatar you pick, and the names you give to private tables you create. Other players can see them (section 5). Nicknames and table names that break our rules — for example hate speech — are automatically replaced with a random name.

3.3 Hands you play and the statistics we calculate

Live tables. For every hand we record:

• the table and the time;
• the cards dealt, including your hidden cards even if you folded;
• every action (fold, check, call, bet or raise, and the amounts) and how long you took to decide;
• chip counts before and after the hand, and the result;
• the nickname you had at the time and your player ID;
• the country you were connecting from.

Hands against the AI (website and app). After each hand you finish against AI opponents at our Texas Hold’em-style tables, the website or app sends the hand to our server under your player ID. The record contains your cards and the AI players’ cards, the actions and decision times, the chips and the result, the nicknames at the table, which game variant you played, and whether you played on the website or in the app.

What we calculate from your hands:

• your statistics: hands played, chips won or lost, how often you enter pots, raise, reach showdown and win, your average decision time, your best win, and the times of your first and last hands;
• a play-style label: “steady”, “attacking”, “careful” or “social”;
• your weekly results for the leaderboards. Everyone can see what a leaderboard shows: your nickname, your avatar, the flag of the country your connection comes from, and your chips won or lost that week;
• the coaching features: “Today’s hand”, session summaries and hand reviews.

We also record which hands you bookmarked and which hand you used your free daily review on.

Why:

• to run the game: live tables, each table’s hand history, your results, reviews and tips, and the weekly leaderboard;
• to keep the game fair and working;
• to improve Poker Room: we study how hands are played to tune our AI players and our coaching, including statistics calculated across all players.
• to share what we learn: we may publish statistics calculated across many players, for example “61% of regular players who rarely go all-in finished ahead”. These are totals and percentages only. They never include a nickname, ID, country or anything else that identifies a player.

3.4 Reports, blocks and bans

In the app you can report another player’s nickname or block a player. To make this work without revealing anyone’s player ID, each player at a table and on the leaderboard also carries a short player key: a one-way code worked out from the player ID. It can’t be turned back into the player ID.

• Reports. We store your player key, the reported player’s key, the nickname they were showing, the table, the reason, the time, and what we decided. The reported player is not told who reported them. We review reports within 24 hours.
• What we can do about a report: take no action; replace the nickname with a system name; or ban the device from live tables. A replaced nickname goes on a blocklist, so it is replaced again wherever anyone uses it. A banned device can’t join or sit at live tables. Renames and bans take effect within 60 seconds; a banned player who is already seated is stopped the next time they join or sit at a table.
• Blocks. Your list of blocked players is stored on our server (as player keys) so that it comes back if you reinstall the app or change phone. A blocked player is shown to you as “Player”. Blocking only changes what you see; the other player isn’t told.
• Ban records contain only the player key, our reason and the time.

Why: to keep nicknames at the tables acceptable and to stop players who abuse the game. How long we keep each of these is in section 8.

3.5 Location and network operator (worked out from your IP address)

Our hosting provider, Cloudflare, tells our server which country, city/region and network operator your IP address belongs to. A network operator is, for example, your broadband or mobile provider, or a company network, school network, data centre or VPN. It is identified by a number (an “ASN”) and the operator’s name.

What we store:

• Country, on your player record and on every live-table hand.
• The most recent city/region and network operator (ASN number and name). These are overwritten on each visit; we don’t keep a history of them.
• We do not store your IP address in our game database.

When it is collected:

• Website: when you open the live lobby, or when a game page shows your practice profile or “Today’s hand” — which happens as soon as you start a game against the AI.
• App: each time the app starts, and when you come back to it after 10 minutes or more.
• Both: your country, each time you join a live table.

Why:

• to understand where our players are, for example which countries and languages to support;
• to recognise traffic from data centres, VPNs and web proxies, which can point to abuse or automated traffic;
• occasionally, to understand how a group of players on the same network found us, for example friends or colleagues who play together;
• for running the service and for support.

The city/region and network operator are cleared automatically once you have neither visited nor played for 12 months (a daily job does this). Your country stays on your player record until you delete your data.

3.6 How you found us and what you did

What the website saves in your browser:

• on your first visit, the address of the site that sent you (the “referrer”) and the page you landed on;
• a short record of your path through the site: whether you started with games against the AI or with live play, which AI games you played and for how long, and your last 20 steps.

Where a summary of this goes:

• Our server receives the referrer, the landing page and a summary of the path, with your player ID, at the moments described in 3.5. The app sends the same kind of summary, with “app” as the source.
• Google Analytics receives the website’s path summary, including your last 8 steps, with some events — for example when you open the live lobby or click “Play Live”. It does not receive your player ID.

What our server keeps:

• the referring site’s domain only (for example google.com), or “invite”, “direct” or “ios” (the app);
• the address of your landing page (up to 120 characters), which can include an invitation link’s table code;
• the name of the web proxy, if you came through one;
• the path summary: the kind of path, the seconds and number of games against the AI, and your top games;
• when you last opened the lobby or the app.

Why: to learn which pages, links and invitations bring players to the live tables. These fields are cleared automatically after 12 months without a visit or a hand, like the city and network in 3.5.

3.7 Signing in with Apple or Google (optional)

What we receive from Apple or Google:

• a permanent account identifier;
• your email address — from Google only if Google has verified it; from Apple either your real address or a private relay address if you chose “Hide My Email”;
• your name, if they share it. In the app, if you already have a Poker Room nickname, we store the nickname instead of your account name.

We never see your password. From Apple we also receive a token, which we keep only so that we can ask Apple to cancel Poker Room’s sign-in access when you delete your data.

What we store: the provider and account identifier, which player ID the account belongs to, your email, name and avatar choice, when you first and last signed in, and when you last visited (updated at most once an hour).

Why: to recognise you on another device, so your nickname, results, weekly ranking and private tables come with you.

How the sign-in buttons work:

• Website: the “Sign in with Google” button is loaded from Google (accounts.google.com/gsi/client) only when you open the account panel while you are not signed in. At that moment Google receives the request and may see that you are signed in to Google, even if you don’t click the button. The rest of the website doesn’t load anything from Google’s sign-in service.
• App: Google sign-in opens Google’s page in a secure browser window. Apple sign-in uses Apple’s built-in panel.

Signing out doesn’t remove the link between your Apple or Google account and your player record. “Delete my data” does (section 9).

3.8 Weekly email (only if you tick the box)

When you sign in in the app, you’ll see a separate box asking whether you want a weekly summary of your hands with a coaching tip. The box starts unticked. If you tick it, we record that you agreed and when. You can turn it off at any time in the account panel.

We haven’t sent any of these emails yet. Every one will include an unsubscribe link and will come from a pokerroom.games address, sent through Cloudflare’s email service. We don’t use your email address for any other reminders or marketing.

3.9 Analytics and crash reports

Website: Google Analytics 4

• What it measures: page views; game events such as hands started and finished, their results and the actions you take; lobby and table visits, including the table code; the steps of signing in; and time spent on the site.
• Cookies: Google Analytics sets cookies called _ga and _ga_VGTEB8438T, which last up to 2 years — in the EEA, the UK and Switzerland only after you accept them.
• Your IP address: Google receives it and uses it to estimate your location. Google Analytics 4 does not store IP addresses.
• What we don’t send: your player ID, nickname and email never go to Google Analytics.
• Settings: Google Signals is off. Detailed event data is kept for 2 months and user-level data for 14 months.
• Your choice: in the EEA, the UK and Switzerland, Google Analytics doesn’t set its cookies until you accept them in the banner shown on your first visit. Until then — and if you reject them — Google Analytics only receives basic signals without cookies or identifiers, for example that a page was viewed. Elsewhere, Google Analytics sets its cookies by default. Wherever you are, you can change your choice at any time with “Cookie settings” at the bottom of every page; rejecting also deletes the Google Analytics cookies already set. You can also use Google’s opt-out browser add-on or block cookies in your browser. The game works either way.

App: Google Firebase Analytics and Crashlytics

• Firebase Analytics records how the app is used, for example screens and in-app events such as signing in. Each event carries your device model, iOS version, app version, language and approximate country, and is linked to a random identifier for your app installation — not to your player ID.
• Crashlytics sends a crash report when the app crashes: the error details, device model, iOS version, app version, free memory and disk space, and an installation ID. Firebase keeps crash reports for 90 days.
• The app does not read your device’s advertising identifier (IDFA) and does not track you across other companies’ apps or websites, which is why it never shows Apple’s tracking prompt.
• App analytics go into the same Google Analytics property as the website, so the same retention settings apply. The app currently has no in-app switch to turn analytics off.

3.10 Hosting, security and technical logs

• Hosting. Cloudflare hosts the website, the game server and its database, and our email address. Like any web host, it processes your IP address and request details to deliver pages, connect you to tables and protect us against attacks.
• How we use IP addresses. Only for security, for running and troubleshooting the service, and for aggregate analysis (for example, how many players come from a country). Our game database never stores your IP address.
• Logs. Our game server writes error and diagnostic logs, which Cloudflare keeps for up to 7 days. These logs can include your IP address, your player ID and browser or app details. We never write sign-in tokens into them.
• Dashboards. Cloudflare’s security and traffic dashboards show us request details, including IP addresses, for a limited time. We use them only for the purposes above.
• Fonts. The website’s fonts are served from our own site, so loading a page doesn’t send a request to Google Fonts.

3.11 Data that stays on your device

Website (your browser’s local storage):

• your player ID, and — if you signed in on this browser — the guest ID it had before, so that “Delete my data” can erase both;
• the chips, wallet, best results and any game in progress from your games against the AI;
• settings such as sound, your nickname and avatar;
• the list of private tables you’ve visited and your answer to “Today’s hand”;
• the referrer, landing page and path record from 3.6, a summary of which is also sent to us.

Clearing your browser data removes all of this. We can’t restore chips or settings. App (the app’s storage on your phone): similar data, plus your block list and your sign-in status (provider, email and name, as shown in the account panel). Deleting the app removes it.

3.12 When you email us

If you write to hello@pokerroom.games, or to our older address feedback@youta.fun, we receive your email address, your message and any attachments.

• Messages to hello@ arrive through Cloudflare’s email routing; replies are sent through Cloudflare. Messages to the older address are received by our Japanese web host, Mixhost, which also keeps a copy.
• All support email ends up in our Google (Gmail) mailbox.
• An AI assistant (Claude, provided by Anthropic) reads the mailbox to sort and summarise new messages for us. It doesn’t send anything; a person writes and sends every reply.
• We use your email to answer you and fix problems. For example, we may give back chips that a bug took away; in that case we keep a short record of the chip grant with your player ID.
• We delete support emails 12 months after the conversation ends.

3.13 What we don’t collect

Precise location (GPS); contacts, photos, camera or microphone; payment details; your device’s advertising identifier. There is no text chat at the tables, and the app doesn’t send push notifications.

4. Legal bases (for people in the EEA, the UK and Switzerland)

Where we rely on legitimate interests, you can object at any time. Email hello@pokerroom.games and we’ll stop, unless we have compelling reasons to continue, for example investigating abuse.

5. What other people can see

Live tables have real people, and AI players can fill empty seats. At a live or private table, other players and spectators see:

• your nickname, avatar and chip count;
• your actions, and whether you are timed out or away;
• your cards, if you show them at showdown.

Their browsers and apps also receive your player key (3.4) with your seat and your leaderboard entry, so that reporting and blocking work. It is not shown on screen and can’t be turned back into your player ID.

• The table’s hand history lists the last hands played at that table (up to 100 hands, kept for up to 14 days). Anyone at the table can open it. It shows nicknames, the cards shown at showdown, and the viewer’s own cards.
• The public lobby: anyone can see the nicknames of the players seated at public tables.
• The weekly leaderboard (public): if you played at least 30 live-table hands in a week and finish in the top 10, it shows your nickname, avatar, play-style label, net chips and number of hands. Previous weeks stay viewable.
• Private tables: anyone with the link can join or watch, and can see the table’s name and the creator’s nickname.

What other players can’t see: your statistics (apart from the leaderboard), your country, location or network, your email, whether you’ve signed in, or whether you have reported or blocked anyone.

6. Who we share data with

We don’t sell your personal data.

Service providers. These companies process data for us. For sign-in, Apple and Google act as independent companies under their own privacy policies.

• Cloudflare, Inc. (USA): website hosting, game server and database, email routing and sending, security.
• Mixhost (Japan): receives and stores email sent to our older address, feedback@youta.fun.
• Google LLC (USA) and its affiliates: Google Analytics (website); Firebase Analytics and Crashlytics (app); Google Sign-In, if you use it, covered by Google’s privacy policy; and Gmail, for our support mailbox.
• Apple Inc.: Sign in with Apple, covered by Apple’s privacy policy, and App Store distribution. If you’ve agreed in iOS settings to share analytics with app developers, Apple shows us summary app statistics and crash data.
• Anthropic PBC (USA): the AI assistant (Claude) that sorts and summarises our support email (3.12) and that we also use to help analyse game and usage data.

Other players see what section 5 describes.

Authorities. We share data when the law requires it, or when we need to protect players, ourselves or others from fraud or abuse.

Advertising (website). The website uses Google AdSense, run by Google LLC, to show ads. Google and its partners use cookies and similar technologies to show ads based on your earlier visits to this and other websites, to limit how often you see an ad, and to measure ads and prevent fraud. Google’s use of advertising cookies lets it and its partners show you ads based on your visits to our site and other sites. How Google uses this information is explained in How Google uses information from sites that use its services.

• You can turn off personalised ads from Google in My Ad Center, and from many other ad companies at aboutads.info.
• In the EEA, the UK and Switzerland, a Google-certified consent message asks for your choice before any advertising cookie is set, and you can change your choice later from the same message.
• We don’t send Google your player ID, nickname, email address or anything else that identifies you.
• The Poker Room app does not show ads.

Changes. If we add other ad companies, we will list them here first.

7. Transfers to other countries

Our company is in Japan. Our providers store and process data in several countries, including the USA.

• Our game database (Cloudflare D1) runs in Cloudflare’s Asia-Pacific region. Cloudflare may also process data in other countries to deliver and protect the service.
• The European Commission has recognised Japan as providing an adequate level of data protection, and so has the UK.
• For data handled by providers in the USA, we rely on the safeguards in their data-processing terms, such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.
• If you are in Japan and would like information about how your data is protected when providers outside Japan handle it, email us.

8. How long we keep data

9. Deleting your data, and your other rights

Delete my data (do it yourself)

• Website: open Play Online (the live lobby). Click your player name at the top to open the panel where you change your nickname and sign in, and choose “Delete my data” at the bottom.
• App: open Settings → “Delete my data”, at the very bottom of Settings. If you’re signed in, you can also use “Delete account” in the account panel. Both do exactly the same thing.

This is what happens straight away:

• Your hands are anonymised. Your player ID, nickname and country are removed from every recorded hand, at live tables and against the AI. The anonymised record keeps the cards, actions, decision times, chip amounts and times.
• These are deleted: your statistics, including the location, network, referrer and path fields; your statistics from games against the AI; your saved hands and daily-review records; your sign-in link (email, name and email choice), on every device that uses that account; reports you made and reports about you; your block list, and other players’ blocks of you.
• Past weekly leaderboards show “Player” with a neutral avatar instead of your nickname and avatar.
• Apple and Google access. For Apple, we ask Apple to cancel Poker Room’s sign-in access; you can also remove it yourself in your Apple Account settings under “Sign in with Apple”. For Google, remove Poker Room in your Google Account → Security → Your connections to third-party apps & services.
• Private tables you created stay open for other people, but you are no longer shown as their creator.
• The tables’ short hand histories are anonymised in the same way, and you’re removed from the day’s visitor list.
• You start over. Your browser or app forgets the ID and you become a new player. If you signed in on that browser or phone, the guest ID it had before is erased too. On the website, your chips from games against the AI stay in your browser.

What deletion doesn’t reach:

• Ban records and blocklisted nicknames stay, as described in section 8.
• Analytics and crash reports. Data in Google Analytics, Firebase and Crashlytics isn’t linked to your player ID, so we can’t find it by ID and delete it. It expires as described in section 8.
• Emails you sent us and chip-grant records. Ask us and we’ll delete them.
• Backups. Deleted data stays in our database provider’s recovery history for up to 30 days.

If you can’t use the button, or want a copy of your data

Email hello@pokerroom.games and tell us one of these:

• your support code (3.1) — on the website, “Copy my ID” in the account panel; in the app, “Support code” at the bottom of Settings;
• if you signed in: write from the email address linked to your account.

Please don’t send us your player ID itself. We’ll use the support code or your email address to find your data, then delete it for you or send you a copy by email. We reply to every request within 30 days.

Your rights

Depending on where you live, you may have the right to:

• get a copy of the data we hold about you. Email us as described above and we’ll send it in a common format such as CSV;
• correct it — you can change your nickname at any time;
• delete it (above);
• object to processing based on our legitimate interests, or ask us to restrict it;
• withdraw consent at any time — for the weekly email, use the switch in the account panel;
• take your data elsewhere (data portability);
• complain to a data-protection authority: in the EU, your local authority; in the UK, the ICO; in Japan, the Personal Information Protection Commission. We’d appreciate the chance to fix the problem first.

The laws that give these rights include the GDPR (EEA), the UK GDPR, Switzerland’s data protection act (FADP), Japan’s Act on the Protection of Personal Information (APPI), and US state laws such as California’s CCPA. We don’t charge for requests. Before acting, we may ask you to show that the data is yours, for example with your support code or by writing from your linked email address.

Automated decisions. We don’t make any decision with legal or similarly significant effects about you by automated means alone. Play-style labels and coaching tips are calculated automatically and are for fun and practice only. A person reviews every report before we rename or ban anyone.

US residents. We don’t sell personal information.

10. Children

Poker Room is only for people aged 18 or over (see our Terms of Use). The iOS app is rated 18+ on the App Store because it simulates gambling. We don’t ask for your age or date of birth, and the website has no age check.

If we learn that someone under 18 has used Poker Room, we delete their data. If you are a parent or guardian, email hello@pokerroom.games — ideally with the support code from the child’s browser or app (3.1), or the nickname and roughly when they played — and we’ll delete it.

11. Access by the Poker Room team

To run and moderate Poker Room, the Poker Room team can:

• watch tables. Anyone can watch a public table. We can also watch private tables silently: we don’t appear at the table and aren’t counted as spectators. In both cases we see what any spectator sees, not the hidden cards in a hand that is still being played;
• see at the table which seats are AI players, and each player’s country;
• look up a player by nickname or support code, or in a list of all players, and see their statistics, country, city/region and network operator, the site that first sent them and the page they first landed on, the invitation table and its creator if they came through an invitation link, their path summary, which sign-in provider they used, and their first and last activity;
• see the full weekly leaderboard, with each player’s country and last activity;
• read the database directly, including complete hand records. A complete record contains every player’s cards, which become visible to us once the hand is over;
• handle reports: read them, and within 24 hours dismiss them, replace a nickname with a system name, or ban a device from live tables — and lift a ban;
• replace offensive nicknames and table names, and, on request, delete a player’s data or send them a copy.

We use this access only to run, moderate and improve the game, to answer support requests, and to investigate problems and abuse.

12. Security

• Everything is sent over HTTPS.
• The pr_id cookie can’t be read by scripts on the page.
• Your player ID is never shown in full on screen; for support we use the one-way support code instead.
• Our server checks Apple and Google sign-in tokens and never writes them to logs. We never receive your password.
• Access to the database and to our Cloudflare and Google dashboards is limited to the Poker Room team.

No system is perfectly secure. If a security breach affects your personal data, we’ll tell you and the authorities where the law requires it.

13. Changes to this policy

When we change this policy, we update the date at the top. For important changes — for example new kinds of data, new purposes, or the start of advertising — we’ll post a notice on the website and in the app before the change takes effect, and ask for your consent where the law requires it.

14. Contact

• Email: hello@pokerroom.games
• Contact page: www.pokerroom.games/contact/
• Post: Yoda Co., Ltd., 1-28-7-203 Okubo, Narashino, Chiba 275-0011, Japan