Privacy Notice

1. Who we are

PokerFace is operated by Zachary Scherer, who is the data controller for the personal data described in this notice. That means we decide how and why your personal data is processed.

2. What data we collect

• Account data — username, email address, and login credentials.
• Content you provide — photos you upload for matches and referee review comments.
• Gameplay data — match results, scores, rankings, wins/losses, and purchased or equipped effects.
• Usage and device data — IP address, device and browser identifiers, and basic telemetry about how you use the service.
• Support messages — anything you send us when you contact us.

Live camera video is streamed directly between match participants (peer-to-peer) and is not recorded or stored by us. Payment details are collected and processed by Paddle, our Merchant of Record — we never see or store your card numbers.

3. Why we use it and our legal basis

• Providing the service (contract performance) — creating your account, running matches, recording scores and rankings, delivering purchased effects.
• Security and fraud prevention (legitimate interests) — protecting accounts, enforcing fair play, and preventing abuse.
• Product improvement (legitimate interests) — understanding how the service is used so we can improve it.
• Customer support (contract performance / legitimate interests) — responding to your requests.
• Legal obligations — keeping records where the law requires it.

4. Who we share it with

• Service providers — hosting, database, and infrastructure providers that process data on our behalf.
• Paddle (Merchant of Record) — for the sale of products, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law.
• Other players — your username, rank, match stats, and camera video are visible to the people you play with.

5. International transfers

Some of our service providers process data outside your country, including outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

6. Retention

We keep your personal data for as long as your account is active and as needed for the purposes above. When data is no longer needed, it is deleted or anonymised. Match photos can be deleted by you at any time from your Photos page.

7. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data; to restrict or object to processing; to data portability; to withdraw consent; and to complain to your data protection authority. We respond to requests within one month. To exercise any of these rights, contact us using the details below.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level security in our database.

9. Cookies

We use essential cookies and local storage only — to keep you signed in and remember your session. We do not use analytics or marketing cookies. You can clear them at any time through your browser settings, though signing in again will be required.

10. Contact

For privacy questions or requests, contact Zachary Scherer through the support channel listed in the app or via the contact option on your Paddle receipt.