Privacy Policy

Last updated: July 2026

1. About This Policy

Would You Hold'em Poker ("the Service", "we", "us", "our") is committed to handling personal information responsibly and transparently. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights in relation to it.

This Policy applies to all users of the Service, including game hosts and invited players.

2. What Information We Collect

We collect only the minimum personal information necessary to operate the Service.

From hosts:

• Payment information — processed directly by Stripe, our payment provider. We do not store credit card numbers or full payment details. Stripe's privacy policy is available at stripe.com/privacy.
• Your name and email address as provided during the Stripe checkout process, used for payment verification and transaction records.
• A Stripe transaction reference for the purpose of verifying payment and activating your session.

From all users (hosts and players):

• A display name chosen by you when joining a game.
• Your IP address, used to operate the service and detect abuse.
• Technical session data (browser cookies or local storage identifiers) used to maintain your connection to a game session.

We do not collect:

• Email addresses from players (hosts provide an email during Stripe checkout; visitors may provide one via the Contact Us form)
• Date of birth (other than your confirmation that you are 18 or older)
• Location data beyond IP address
• Any financial information beyond a Stripe transaction reference

3. How We Use Your Information

We use the information we collect solely to:

• Authenticate and maintain your game session
• Verify host payment and activate game rooms
• Prevent abuse, cheating, or misuse of the Service
• Operate and improve the Service

We do not use your information for marketing, advertising, or profiling.

4. Disclosure of Information

We do not sell, rent, or share your personal information with third parties, except:

• Stripe — to process host payment transactions. Stripe receives only what is necessary to process your payment.
• DigitalOcean — our hosting infrastructure provider, who hosts the server on which the Service runs. DigitalOcean's privacy policy is available at digitalocean.com/legal/privacy-policy.
• Google reCAPTCHA — used on our Contact Us form to prevent spam. Google's privacy policy is available at policies.google.com/privacy.
• Legal requirements — if we are required by law, court order, or regulatory authority to disclose information, we will do so only to the extent required.

5. Data Retention

• Game session data (display names, in-game events, chip counts) is held in server memory only for the duration of the session, plus up to one hour after session expiry. It is then permanently deleted.
• Stripe transaction references are retained for a period necessary to resolve payment disputes, then deleted.
• IP logs are retained for a short period for abuse prevention purposes only, then deleted.

We do not maintain any persistent user accounts or long-term personal data records.

6. Security

We take reasonable steps to protect your information from loss, unauthorised access, modification, or disclosure. These measures include encrypted invite URLs using AES-256-GCM, HTTPS for all data in transit, and no persistent storage of sensitive data.

No method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of information transmitted to or from the Service.

7. Cookies and Local Storage

The Service uses browser local storage to maintain your session connection (your in-game identity within a session). This data is stored on your device only, is not transmitted to third parties, and is cleared when your session ends or you clear your browser data.

We do not use tracking cookies, advertising cookies, or analytics tracking of any kind.

8. Third-Party Links and Services

The Service may include links to third-party websites. We are not responsible for the privacy practices of any third-party sites. We encourage you to review their privacy policies separately.

9. Children

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a person under 18 has provided personal information, we will delete it promptly.

10. Your Rights

You have the right to:

• Request access to any personal information we hold about you
• Request correction of any inaccurate personal information
• Request deletion of your personal information (noting that most session data is already automatically deleted at session expiry)

To exercise any of these rights, contact us via our Contact Us page or at support@wouldyouholdem.com.

11. Australian Privacy Law

This Service is operated from Australia. We handle personal information in accordance with Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) to the extent they apply.

Given the minimal nature of the personal information we collect and our automatic deletion practices, the privacy risks associated with this Service are low. We nonetheless commit to handling your information with care and in accordance with the principles of the APPs regardless of any statutory exemption that may apply to us as a small business operator.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective when posted. The date of the most recent update is shown at the top of this document.

13. Contact

For questions, access requests, or complaints regarding your privacy, contact us via our Contact Us page or at support@wouldyouholdem.com.