Your account

What we store

We store your chosen player name, an internal account ID, a salted password hash and a hashed recovery code. We do not store your password or recovery code in readable form. Save the recovery code when it is shown; it allows a password reset.

A secure, HttpOnly session cookie keeps you signed in for up to 30 days. The server stores a hash of its random token. Signing out revokes that session; using recovery revokes all previous sessions.

We store room ownership and membership, play-chip balances, chip transactions and game history so your account can resume. Website accounts and bankrolls are separate from Discord accounts.

Guest play

Guests receive a random player name and the same secure session cookie. No password is required. Guest chips and rooms remain tied to that browser session; signing out, clearing cookies or letting the session expire can lose access. Saving a guest profile as an account keeps its existing chips and rooms.

What other players see

Room invitations are private links: anyone with a link and a guest or registered profile can enter. Other players can see your player name, public game actions and statistics. Website leaderboards cover website players. Hole cards remain private except when revealed by showdown rules or your own choice.

Usage and retention

Our private operator dashboard records connection attempts, session timing, completed hands, account IDs and coarse device categories. It does not receive your password, recovery code or private cards. Hosting providers process network requests. Records do not automatically disappear when you close a room; see the main privacy policy for access, correction, deletion and contact instructions.

Account and gameplay backups support recovery. Never send your password, recovery code or session token in a support message.