Privacy Policy

Who we are

Stacked Poker ("Stacked", "we", "us") runs stackedpoker.io, an online poker site with Free Play tables and real-money tables that settle in USDC on the Base network. This policy covers the website, the game and the emails we send. Questions or requests: stackedpokerapp@gmail.com.

What we collect

When you sign in. Sign-in is handled by our wallet provider, thirdweb. You can connect your own wallet, or sign in with email, a phone number, or a Google, Discord, Telegram, X, Apple or Twitch account, and thirdweb creates a wallet for you. We receive your wallet address, and the email address you signed in with when the sign-in method provides one.

Your profile. The nickname and avatar you choose. If you link an X or Discord account, we store its ID, username, display name and profile picture, plus the access tokens needed to keep that picture current or to check a tournament's entry requirements (for example, membership of a Discord server).

When you play. The hands you play and the actions you take, your results, balances and tournament entries, the tables you host, and the messages you send in table chat.

When you subscribe to updates. Your email address, when and where you signed up, and whether you have unsubscribed.

Technical information. Your IP address, which our servers see on every request. We store it with tournament registrations and free-entry claims to enforce a limit on accounts per connection. If you turn on browser notifications, we store the push subscription your browser gives us and its user agent. Your browser also keeps small preferences (such as table colours and dismissed prompts) in its own storage.

Analytics. We use PostHog, hosted in the EU. Until you choose, and if you decline, it counts visits without cookies or a stored identifier: country, referrer, pages visited and device type, with no way to link one visit to the next. If you allow analytics, PostHog also stores an identifier, records what you click, and may record your session on screen, with typed input masked.

Bot protection. Some actions, like creating a game, run a Cloudflare Turnstile check, which looks at your browser and connection to tell people from bots.

The blockchain is public

Real-money play happens on Base, a public blockchain. Your wallet address, deposits, withdrawals and every settled hand at a real-money table are recorded on-chain, where anyone can read them and no one, including us, can edit or delete them. Nothing on-chain carries your name or email unless you connect them yourself.

How we use it

• To run the game: seat you, deal and settle hands, run tournaments and pay out prizes.
• To keep games fair: detect bots, collusion and multiple accounts, and enforce tournament limits.
• To send announcements about Stacked, like upcoming tournaments, to people who subscribed and to players who signed in with an email address, and to stop the moment you unsubscribe.
• To send the push notifications you turned on, like a tournament about to start.
• To answer you when you contact us, and to fix what breaks.
• To understand how the site is used, so we can improve it.
• To meet our legal obligations and defend legal claims.

We do not sell your personal information, and we do not use it for advertising on other sites.

Who else handles it

We share information only with the companies that run parts of the service for us, and only what each one needs:

• Amazon Web Services: hosting, our database, and email delivery.
• Resend: email delivery.
• thirdweb: sign-in and wallets.
• PostHog: analytics, as described above.
• Cloudflare: DNS and bot protection.
• Netlify: hosting for the website.
• X and Discord: only if you link your account there.
• Your browser vendor’s push service: only if you turn on notifications.

Other players see what the game shows them: your nickname, avatar, actions at the table, chat messages and leaderboard results. We may also disclose information when the law requires it, or to protect players and the service from fraud or abuse.

How long we keep it

We keep account, game and payment records while your account is in use, and afterwards for as long as we need them to settle disputes, prevent fraud and meet legal obligations. Detailed hand replays are kept for a few days. If you unsubscribe from email, we keep your address on a suppression list so we never email it again. Data on the blockchain stays there permanently.

Your choices and rights

• Every email has an unsubscribe link that works in one click.
• You can decline analytics in the banner. To change your answer later, clear this site’s data in your browser and the banner will ask again.
• You can turn off browser notifications in your browser at any time.
• Depending on where you live, you may have the right to access, correct, delete or export your information, and to object to or restrict how we use it. Email us to use any of these rights and we will reply within 30 days.
• If you are in the EU or UK, you can also complain to your local data protection authority.

Where it is processed

Our servers are in the EU (Ireland). Some of our providers process information in other countries, including the United States. Where they do, we rely on the safeguards the law provides for those transfers, such as the European Commission's standard contractual clauses.

Age

Stacked is for adults. You must be at least 18, or the age of majority where you live if that is higher (see our Terms of Service). We do not knowingly collect information from anyone younger. If you think a minor has signed up, tell us and we will delete their information.

Security

We protect what we hold with access controls and encryption in transit. No system is perfectly secure, so please keep your sign-in methods and wallet safe too. Real-money balances are held in smart contracts, not by us; see how custody works.

Changes

If we change this policy, we will update the date at the top. If a change matters, we will also tell you on the site or by email before it takes effect.