Privacy Policy
Effective October 1, 2026 (product and strategy email added; sign-in, analytics and service providers updated; first version August 11, 2026)
This policy describes what Bomb Pot Solver ("we", "us") collects when you use www.bombpotsolver.com and app.bombpotsolver.com (the "Service"), and what we do with it. The short version: we collect the minimum needed to run a poker study tool, we do not sell your data, and we do not run advertising or cross-site tracking.
1. What we collect
- Account data. A username, your email address, and either a password or a sign-in through Google or an emailed sign-in link. Passwords are stored only as salted cryptographic hashes; we cannot read them.
- Billing data. If you subscribe, payment is handled by Stripe. We receive your email address, plan, and payment status from Stripe. Your card number goes to Stripe, not to us, and we never see or store it.
- Study data. Trainer hands you play, grades and statistics derived from them, and hand histories you choose to import for grading.
- Technical data. Standard server logs (IP address, request time, user agent) kept for security and debugging, and a session cookie that keeps you signed in for up to 30 days. The website counts page views with Vercel Web Analytics, which uses no cookies and does not follow you across other sites. We use no advertising cookies.
2. How we use it
To operate the Service: signing you in, computing your grades and leaderboard statistics, processing subscriptions and receipts, answering support email, and keeping the Service secure.
Product and strategy email. If you have an account, we may also email you at most once a week with a strategy spot, links to our own videos, news about the Service, and your own training statistics. Every one of these emails has a one-click unsubscribe link, and you can also turn them off at sign-up or in your account. Account, billing and security emails are not affected.
That is the whole list. We do not sell or rent personal data, and we do not use it for advertising.
3. Who we share it with
Only service providers that host or process data for us: Stripe (payments), Supabase (account sign-in and database), Google (if you choose Google sign-in), Resend (account, receipt and product emails), Cloudflare (networking, DNS, file storage and bot protection), Vercel (website hosting and page-view counts), and rented cloud GPU servers that run custom solves (they receive the poker spot to solve, not your account details). Each receives only what it needs to do its job. We may also disclose information if required by law.
4. How long we keep it
Account and study data are kept while your account exists. Email support@bombpotsolver.com to delete your account, and we will remove your account data and imported hands within 30 days. Billing records are kept as long as tax and accounting rules require. Server logs rotate on a short schedule.
5. Security
Traffic is encrypted in transit with TLS, passwords are stored as salted hashes, and the application runs on servers we control, with heavy solves sent to rented GPU servers that receive only the spot to solve. No system is perfectly secure, but we keep the attack surface deliberately small.
6. Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it, all by emailing support@bombpotsolver.com. Residents of some jurisdictions have additional rights under laws such as the GDPR or state privacy acts; we honor reasonable requests from anyone regardless of where they live.
7. Children
The Service is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18.
8. Changes
If this policy changes materially, we will post the new version here and note it in the app. The effective date at the top always tells you when it last changed.
9. Contact
support@bombpotsolver.com
Bomb Pot Solver, 82 County Rd, PMB #57, Mattapoisett, MA 02739