Your data

Website accounts

Registration asks only for a player name and password, never an email address. We store your player name, an internal account ID, a salted scrypt password hash and a hash of your recovery code. We do not store your password or recovery code in readable form. The recovery code is shown once; it is the only way to reset a forgotten password.

A secure, HttpOnly session cookie keeps you signed in for up to 30 days. The server stores only a hash of its random token. Signing out revokes that session. Using your recovery code, or saving a guest profile, revokes the earlier sessions.

We store the private rooms you create or join, your website play-chip bankroll, chip transactions, statistics and hand history so your account can resume. Website accounts and bankrolls are separate from Discord accounts and are not linked to them.

Guest play

Guests get a random player name and the same kind of session cookie, with no password. Guest chips and rooms stay tied to that cookie: signing out, clearing cookies or letting the session expire loses access. Saving a guest profile turns it into an account and keeps its chips and rooms.

Discord players

When you open Texas Hold’em as a Discord Activity, Discord supplies your user ID, name and avatar and the server, channel and Activity identifiers. The game stores your profile, play-chip balance per Discord server, chip transactions, statistics and hand history. We also keep the name and icon of the server where the game was started, which is public information about that server, to count where the game is played. Discord access tokens are checked in memory and not saved in the game database.

What other players see

Room invitations are private links: anyone with the link and a guest or registered profile can enter. Other players at your table see your player name, public actions and statistics. Global leaderboards and global profiles show only your poker name, a picture from the game’s own gallery, your global level, global trophies and chosen achievements, never your Discord name, picture, ID or server. A replay opened from a shared link names players the same way. You can pick your poker name and picture; otherwise the game generates them. If you report a player, the operator sees who reported whom, the reason and the hand; the reported player is not told who reported them. Hole cards stay private unless revealed by showdown rules or your own choice.

Usage records

A private operator dashboard records connection attempts, session timing, completed hands, account IDs and coarse device categories. It does not receive passwords, recovery codes or private cards. Hosting providers process network requests, including IP addresses.

Retention

There is no automatic expiry for accounts, bankrolls or hand history: they are kept until the account is deleted. If you use the daily spin, the game stores the day you spun, the chips it gave and which wallet they went to, and deletes that with your account. Expired sign-in sessions are removed. Database backups are taken every six hours and the newest 14 are kept, so a deleted record can remain in a backup for about three and a half days.

Deleting your data

Website account or guest: sign in, open the lobby and choose Delete my account. Registered accounts confirm with their current password. Deletion signs out every device, removes your player name, poker name, password and recovery hashes, bankroll, leaderboard and season stats, and rooms nobody else has joined. Rooms other players have joined keep working and pass to one of them. Hands you played stay in other players’ history with your name and ID removed. Records in the operator dashboard are not removed automatically; ask support if you want them erased too.

Discord player: email menoachcoach@gmail.com with the subject “Texas Hold’em privacy request” and your Discord user ID. See Support.

Never send your password, recovery code or session token in a support message.