Privacy Policy
Effective from: April 7, 2026
1. Introduction
This Privacy Policy describes how AceFlow GTO ("we", "our", or "us") collects, uses, and protects information when you use our website at aceflow.gg and our web application at app.aceflow.gg (collectively, the "Service"). AceFlow GTO is an educational strategy analysis platform for post-game study of competitive card games.
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Information You Provide
- Account data: Email address and display name. If you sign in via Google, we receive your name, email, and profile picture. We do not store your Google password.
- Payment data: Processed by our payment provider (Dodo Payments). We do not store credit card numbers. We retain transaction identifiers for billing.
- Support communications: Messages sent via email or Discord.
2.2 Information Collected Automatically
- Usage data: Features used, pages visited, analysis requests, session duration.
- Device data: Browser type, OS, screen resolution, IP address.
- Cookies: Essential cookies for authentication and sessions only. No advertising or tracking cookies.
2.3 Hand History Data
Hand histories are parsed entirely on your device (client-side). Raw hand history files are never uploaded to or stored on our servers. Only aggregated, anonymized statistical data may be processed server-side for Leak Finder. This data cannot reconstruct individual hands or identify poker accounts.
3. How We Use Your Information
- Provide, maintain, and improve the Service.
- Process subscriptions and manage accounts.
- Send essential service communications (verification, billing, security).
- Monitor usage to improve performance and experience.
- Detect and prevent abuse, fraud, or Terms violations.
- Enforce our Anti-RTA Policy.
We do not sell your personal information. We do not use your data for targeted advertising.
4. Data Sharing
- Payment processor: Dodo Payments receives billing information.
- Hosting providers: Vercel, Hetzner, and Cloudflare process data to deliver the Service.
- Authentication: Supabase handles auth services.
- Legal: We may disclose information if required by law or governmental request.
5. Data Security
We use TLS/SSL encryption, secure authentication, and access controls. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
Account data is retained while your account is active. Upon deletion, personal data is removed within 30 days, except where retention is legally required. Anonymized data may be retained indefinitely.
7. Your Rights
Depending on jurisdiction, you may access, correct, delete, restrict, or port your data. Contact privacy@aceflow.gg to exercise these rights.
8. Children's Privacy
The Service is not for anyone under 18. We do not knowingly collect data from children.
9. International Transfers
Data may be processed outside your country of residence. By using the Service, you consent to such transfers.
10. Changes
We may update this policy. Material changes will be posted here with a revised date. Continued use constitutes acceptance.