Privacy Policy

1. Age Requirement

Chaos Hold'em Poker is intended for users aged 17 and older. We do not knowingly collect personal information from anyone under 17 years of age. If we become aware that we have collected personal information from a person under 17, we will take steps to delete that information promptly. If you believe a minor has provided us with personal data, please contact us at the address listed in Section 12.

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

When you use the App, we automatically collect:

• Device information — device type, operating system, and version
• Browser / user agent — browser type and version (for web-based access)
• IP address — used for security, fraud prevention, and approximate geolocation
• Firebase Authentication tokens — managed by Google Firebase to maintain your login session
• Usage data — app interactions, session duration, and feature usage (via Firebase Analytics, only if you have consented)

2.3 Gameplay Data

We store the following gameplay data on our servers to provide and improve the game experience:

• Hand history — records of individual poker hands played
• Player statistics — win rate, hands played, level, experience points, and progression data
• In-game currency balances — chips, jewels, and cosmetic item ownership

Public Profile Statistics

Certain gameplay statistics are visible to other players on your Player Card by default, including: hands played, best hand achieved, biggest pot won, and themes owned. You can control which statistics are public at any time from your Player Card settings.

2.4 Local Storage (On Your Device)

We use your browser's localStorage to save your preferences locally on your device. Some of this data is also stored by Firebase Authentication using IndexedDB to maintain your login session. Locally stored data is not transmitted to our servers unless explicitly noted:

• Authentication session tokens (Firebase — synced with our servers)
• Cookie consent preference
• Theme and card back preferences
• AI difficulty setting
• Game speed setting
• Favorite quips
• Custom music playlist selections

We do not use third-party tracking cookies or advertising cookies.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the service — create and manage your account, facilitate gameplay, and deliver in-game features
• Process transactions — handle in-app purchases for cosmetic items and virtual currency (no real-money gambling or cash-out functionality exists)
• Improve the App — analyze usage patterns, diagnose technical issues, and optimize performance
• Communicate with you — send service-related notices such as account verification, security alerts, and policy updates
• Ensure security — detect and prevent fraud, abuse, and unauthorized access
• Respond to support requests — address customer service inquiries submitted through our contact form

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

5. Third-Party Services

We use the following third-party services to operate the App. Each service has its own privacy policy governing the data it processes:

We do not currently use advertising networks, sell data to ad-tech companies, or share personal data with any other third parties. If this ever changes, we will notify you in advance.

Data processed by Google Firebase is stored on servers located in the United States. For international users, this constitutes a transfer of personal data — see Section 9.

6. Data Retention

7. Your Rights

Depending on your location, you may have some or all of the following rights regarding your personal data:

7.1 All Users

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request deletion of your account and personal data
• Data portability — request your data in a structured, machine-readable format

7.2 EEA / UK / Swiss Residents (GDPR)

In addition to the rights above:

• Restrict processing — request that we limit how we use your data
• Object to processing — object to processing based on legitimate interest
• Withdraw consent — withdraw consent at any time where processing is based on consent (e.g., analytics)
• Lodge a complaint — file a complaint with your local data protection supervisory authority

7.3 California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act and California Privacy Rights Act, you have the right to:

• Know what personal information we collect, use, and disclose
• Delete your personal information
• Opt out of sale — we do not sell your personal information
• Non-discrimination — we will not discriminate against you for exercising your rights

Categories of personal information collected (per CCPA definitions):

• Identifiers (email address, display name, IP address)
• Internet or electronic network activity (usage data, device information)
• Commercial information (purchase history)

To exercise any of these rights, contact us using the information in Section 12.

8. Account Deletion

You may request deletion of your account at any time by emailing us at the address in Section 12.

Upon deletion:

• Your personal data (email, display name, avatar selection) will be permanently deleted within 30 days
• Your gameplay statistics will be anonymized (stripped of all identifying information) and retained for aggregate analytics
• Any remaining virtual currency or cosmetic items will be forfeited and are not refundable
• Local storage data on your device is not affected — you may clear it manually through your browser or device settings

9. International Data Transfers

Our servers and third-party service providers are located in the United States. If you access the App from outside the United States, your personal data will be transferred to and processed in the United States.

For users in the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Google's Data Processing Addendum and compliance certifications for Firebase services

By using the App, you acknowledge and consent to the transfer of your data to the United States.

10. Data Security

We implement industry-standard security measures to protect your personal data, including:

• Encryption in transit — all data transmitted between your device and our servers uses TLS/SSL encryption
• Firebase Security Rules — server-side access controls restrict data access to authorized users only
• Server-authoritative architecture — all game logic runs on our servers; clients cannot directly modify game state or other players' data
• Payment security — all payment processing is handled by PCI-DSS compliant providers (Stripe, Google, Apple); we never receive or store your full payment credentials
• Access controls — administrative access to backend systems is restricted and authenticated

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through an in-app notice (for material changes)

Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact us:

For EEA/UK residents: If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

13. Virtual Currency Disclosure

Chaos Hold'em Poker offers virtual currency (chips and jewels) and cosmetic items available for purchase with real money. This is not real-money gambling. Virtual currency:

• Has no real-world monetary value
• Cannot be exchanged, traded, or cashed out for real money or prizes
• Is non-transferable between accounts
• Is non-refundable once purchased (except as required by applicable law or platform refund policies)

All purchases are final and subject to the terms of the platform through which they were made (Google Play Store, Apple App Store, or Stripe).