PokerPass

Privacy policy

Last updated 11 October 2026

Who we are

BluffLab is made by [publisher name] ("we", "us"). We're responsible for the information described here. You can reach us at privacy@blufflab.app.

What stays on your device

Your levels and XP, achievements, streaks, lessons, daily games and missions, the weekly league, the coach's notes on your games, your saved mistakes, your progress charts, the computer players' memory of how you play, your card back and your settings are saved in your browser's storage on your device. If you play as a guest they aren't sent to us, and clearing the app's data or uninstalling it removes them.

If you're signed in to an account, a copy of these records is also saved to your account (see below), so your progress follows you to other devices. When you sign out, they're removed from the device once your account has them.

What we keep when you make an account

Accounts are optional: you can play as a guest without one. If you sign up, we keep:

• Your sign-in: your email address and password (stored securely by our sign-in provider, never readable by us), or your Google account's name, email and picture if you sign in with Google.
• Your profile: your username, the face you make in the app (a cartoon built from the app's own pieces, not a photo), when you joined and were last online, whether you're online now, your online rating, and a few game totals.
• A scrambled form of your email address (a one-way hash), so friends who have your address can find you. You can switch this off in Friends, and we then remove it.
• Your saved progress: the records listed under "What stays on your device", kept in a part of your account that only you can read.
• This week's league score: the XP you've earned this week and last week, and your league division, so your friends' leagues can include you.
• Your Hand of the Day answer, counted anonymously: each day's tally only records how many players chose each option, with no names attached.
• Today's daily game results: your Daily Challenge score and Hand of the Day grade for today, so your friends can compare. Each day's replace the day before's.
• Your friends, friend requests, and invitations to tables.
• Online games: the tables you play at, with the players' usernames, the cards dealt, the play chips and the moves made. Tables are deleted automatically about 30 days after they're created.
• The membership list, if you ask us to tell you when a membership plan starts: which plan, and when you asked.
• Your puzzle scores: your puzzle rating, how many rated puzzles you've solved and your best Puzzle Rush scores, so your friends can compare.
• Challenges you send to friends and receive from them: who sent it, the game and the score to beat, and the score that answered it.
• Error reports: when something goes wrong in the app, the error message, the screen you were on, the app version and your browser type, so we can fix it. They don't include your name, account or anything you've typed.

Who can see what

Other signed-in players can see your username, the face you made, whether you're online, your online rating, your league score (this week's XP and your division), today's daily game results and your puzzle scores, so they can find you, play you, race you in the weekly league and compare scores. Nobody but you can see your saved progress. Players at your table see what happens at that table, as in any card game. Your friends see that you're friends. Nobody else sees your email address.

Your contacts

If you choose to find friends from your contacts, your phone shows its own contact picker and only the contacts you pick are shared with BluffLab. Their email addresses are scrambled (hashed) on your device, and only those hashes are used to look for matching accounts. We don't keep your contacts or their hashes.

Invite links you share contain your account ID, so whoever signs up from your link is offered as a friend.

Who provides our services

We use Google Firebase to sign you in (Firebase Authentication), to store account and game information (Cloud Firestore), and to host the app (Firebase Hosting). Google processes this information for us under its terms, and may do so outside the UK and EU with safeguards in place. See Firebase's privacy information.

We don't use advertising or analytics services.

Why we use your information

We use it to run your account and the games you play (this is needed to provide the service you asked for), to keep games fair and players safe (our legitimate interest), and, for contacts, only when you choose to use that feature.

How long we keep it

We keep your account information until you delete your account. Online tables are deleted about 30 days after they're created. Information on your device stays until you clear it.

Your choices and rights

• Delete your account in the app: Profile, then Delete account. This deletes your sign-in, profile, saved progress, friends, requests, invitations and membership list entry, and takes you off your friends' lists.
• Change your username or stop being findable by email in the app.
• Ask us for a copy of your information, or to correct or delete it, at privacy@blufflab.app.
• If you're in the UK, you can complain to the Information Commissioner's Office (ico.org.uk). In the EU, you can complain to your local data protection authority.

Children

BluffLab is for adults (18 and over). It isn't meant for children, and we don't knowingly hold information about anyone under 18. If you think a child has made an account, contact us and we'll delete it.

Security

Information travels encrypted (HTTPS), and our database only lets each person change their own account. No system is perfectly secure, so please use a password you don't use anywhere else.

Changes

If we change this policy, we'll update the date at the top, and tell you in the app if the change is important.

Terms of use · Open BluffLab