Privacy Policy

The controller of personal data processing is:
POK GENIUS SAS
Address: 6 rue d'Armaillé, 75017 Paris
Email: contact@pokgenius.com

We collect the following data:

• Registration data: first name, last name, email address, password (hashed)
• Usage data: training statistics, progress, trainer scores
• Billing and subscription data: subscribed plan, payment and invoice history, customer identifier assigned by our payment provider. Bank card data is collected and processed exclusively by Stripe and never passes through our servers
• Technical data: IP address, country of connection, browser type, pages visited, connection timestamps
• Cookies: authentication and session cookies

Your data is processed to:

• Manage your account and authenticate your access
• Provide the platform's features (ranges, trainer, videos, coaching)
• Process your payments and manage your subscriptions and invoices
• Track your progress and personalize your training experience
• Send you communications relating to the service (notifications, updates)
• Prevent fraud and abusive use (account sharing, automated data extraction)
• Review reports between members (when a member reports their opponent from a game table, the phrases, items and mascot moods sent during the reported game are attached to the report)
• Improve the platform and resolve technical issues

When you play a League game (ranked game or challenge), it appears in the list of games in progress, and any signed-in member can watch it live. They see your display name, your avatar (and its frame), your rating, your plan (unless you have hidden it), your stacks, your actions, the phrases, items and mascot moods sent during the game, and your cards when they are shown at showdown or during an all-in; they never see your hole cards until those cards are shown. The spectator receives no recording of the game. When you are the one watching, players only see the number of spectators, never who you are.

Your plan (Pro, Elite, Genius) is shown next to your display name to other signed-in members. You can hide it in your profile.

When you have been looking for a ranked game for more than 10 seconds, your display name, avatar and rating are shown to other signed-in members, who can offer to play you. You can turn this off in your preferences.

The processing of your data is based on:

• Performance of the contract: for the provision of the service, including showing League games to the members watching them live, and the management of payments (article 6.1.b of the GDPR)
• Legal obligation: for the retention of accounting and billing documents (article 6.1.c of the GDPR)
• Legitimate interest: for the improvement of the platform, security, fraud prevention and the moderation of exchanges between members (review of reports) (article 6.1.f of the GDPR)
• Consent: for optional marketing communications (article 6.1.a of the GDPR)

Your data is processed by the Publisher's authorized teams and by service providers (processors within the meaning of the GDPR) strictly necessary for the operation of the service:

• Stripe (Stripe Payments Europe Ltd, Ireland) — payment processing and billing
• Amazon Web Services (AWS EMEA SARL, Luxembourg) — hosting of the API and database, Paris region (eu-west-3)
• Vercel (Vercel Inc., United States) — website hosting
• Brevo (SAS, France) — sending of transactional emails
• Bunny.net (BunnyWay d.o.o., Slovenia) — hosting and delivery of video content
• Sentry (Functional Software Inc., United States) — technical error tracking

No data is sold or shared with third parties for advertising purposes.

• Account data: retained for the duration of your registration, then deleted within 30 days following the deletion of the account
• Usage data: retained for 3 years from the last activity
• Reports made from a game table or in the Community (and what is attached to them: the phrases, items and mascot moods, or a copy of the reported content): retained for 12 months after the moderation decision, then deleted
• Invoices and accounting documents: retained for 10 years in accordance with legal obligations
• Technical data: retained for 12 months
• Session cookies: duration of the session or 30 days maximum

In accordance with the GDPR, you have the following rights:

• Right of access: obtain confirmation that your data is being processed and obtain a copy of it
• Right to rectification: correct your inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to portability: receive your data in a structured and readable format
• Right to object: object to the processing of your data
• Right to restriction: request the restriction of processing in certain cases

To exercise your rights, contact us at privacy@pokgenius.com. We will respond within 30 days.

You may also lodge a complaint with the CNIL (French Data Protection Authority).

Pok Genius uses only cookies strictly necessary for the operation of the service:

• Authentication cookie (token): allows you to keep your session logged in
• Technical cookies: necessary for the proper functioning of the application

We do not use advertising tracking or third-party analytics cookies.

The database and the API are hosted in the European Union (AWS, Paris region). Some providers (Vercel, Stripe, Sentry, Bunny.net delivery network) may process data outside the European Union. These transfers are governed by appropriate safeguards in accordance with the GDPR: standard contractual clauses of the European Commission and, where applicable, certification under the EU–US Data Privacy Framework.

We implement appropriate technical and organizational measures to protect your data: password encryption, HTTPS connections, strict access control, access monitoring.

We may update this privacy policy at any time. Changes are brought to your attention on the platform, by updating the date shown at the top of this policy; the online version applies from that date.

For any questions relating to this policy or the processing of your data:
Email: contact@pokgenius.com
Address: 6 rue d'Armaillé, 75017 Paris