Privacy Policy

Last updated: 19 August 2026

1. Who is responsible for your data

This policy applies to preflopranges.app and describes what we actually collect, which is deliberately little: there is no advertising, no analytics service and no tracking of any kind on this site.

2. What we collect and why

Browsing without an account

An anonymous random identifier is stored in a cookie on your browser. It does not identify you personally; it only lets us count the daily quota per browser. Your IP address is used to enforce rate limits, but it is never stored in readable form: only a keyed cryptographic hash of it is kept, which cannot be reversed to obtain the address.

If you create an account

We store your email address, the account creation date and, if you practice, your practice results (spot, hand and whether you answered correctly), so the trainer can show you your own statistics. If you sign in with Google we receive only your verified email address — no name, no profile, no contacts.

If we email you

Sign-in links are sent through Resend, an email delivery provider, which processes your email address for that sole purpose.

3. Legal bases

• Performance of a contract (Art. 6.1.b GDPR): managing your account.
• Legitimate interest (Art. 6.1.f GDPR): abuse prevention and rate limiting (anonymous identifier, hashed IP), and the security of the service.

4. Cookies

This site uses only technical cookies that are strictly necessary for it to work, which is why no consent banner is shown (they are exempt under Article 22.2 LSSI-CE):

• pv_s — session: keeps you signed in, or holds the anonymous quota identifier. Lifetime: up to 365 days.
• pv_o — used only during the few seconds of a Google sign-in to protect it against forgery. Lifetime: 10 minutes.

There are no advertising, analytics or third-party cookies.

5. Who receives your data

We do not sell or share your data with anyone for their own purposes. The service runs on infrastructure providers that process data on our behalf:

• Cloudflare (hosting and database; data stored in the European Union — Western Europe region).
• Google (only if you choose to sign in with Google).
• Resend (transactional email delivery).

Where any of these providers process data outside the European Economic Area, the transfer is covered by an adequacy decision or by the European Commission’s Standard Contractual Clauses.

6. How long we keep it

• Rate-limit counters (anonymous ids, hashed IPs): deleted automatically within a day.
• Account data and practice history: for as long as the account exists.

7. Your rights

You can exercise your rights of access, rectification, erasure, portability, restriction and objection at any time by writing to prefloppokersolver@gmail.com from the email address of your account. If you ask us to delete your account we will do so, including your practice history.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD).

8. Changes

If this policy changes, the new version will be published on this page with its updated date. Substantial changes affecting account holders will be announced by email.