Privacy Policy
This policy explains what personal data is used when you visit this website, subscribe to Cardsharpener Pro, or contact us, and what your rights are under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who is responsible for your data
Cardsharpener is run by Luke Smith, a sole trader based in the UK ("we", "us"). Luke is the controller of the personal data described in this policy. You can contact Luke at lukesmith5918@gmail.com, or write to Lantern House, Granville Road, Bath BA1 9BE.
Your poker hands stay on your computer
Cardsharpener is a local poker hand tracker. The hand histories you import, and the SQLite database the app builds from them, are stored on your computer. The app does not upload them to us or to any server, so we cannot see, recover, or delete them for you.
What we collect and why
We only use the personal data below. For each purpose we have set out the lawful basis we rely on.
- Taking payment for Pro. When you subscribe, Stripe collects your email address, card details, and billing address on its hosted Checkout page. We never see or store your full card number. In our Stripe account we can see your name, email address, billing address, card type and last four digits, and your payment history. Lawful basis: performing our contract with you.
- Running your Pro licence. Our licence service on Cloudflare stores a licence record containing your Stripe subscription ID, the device ID the app sends when you subscribe, your subscription status, the end date of your current billing period, and your Stripe customer ID. Stripe tells our service when you subscribe, when your subscription changes or ends, and when a payment fails, so the app can switch Pro on or off. The app checks your licence status with our service, which means your IP address is seen by Cloudflare when it does. Lawful basis: performing our contract with you.
- Billing management. When you choose Manage in the app, we use your Stripe customer ID to open the Stripe Customer Portal for you. Lawful basis: performing our contract with you.
- Tax and accounting records. We keep records of sales and payments as HMRC requires. Lawful basis: legal obligation.
- Support and complaints. If you email us, we use your email address and what you tell us to reply. Lawful basis: performing our contract with you where your message is about your subscription; otherwise our legitimate interest in answering questions about Cardsharpener.
- Keeping the website and licence service secure. Cloudflare, which hosts this website and our licence service, processes your IP address and basic request details (such as browser type and the page requested) to deliver pages and protect against abuse. Lawful basis: our legitimate interest in running a secure, working service.
- Legal claims. We may keep relevant records if we need them to deal with a dispute or legal claim. Lawful basis: our legitimate interest in protecting our legal position.
We do not use analytics or advertising trackers, we do not sell your data, and we do not send marketing emails.
Do you have to give us this data?
You can use the free version of Cardsharpener without giving us any personal data. If you want Cardsharpener Pro, we need the payment and licence details above to sell it to you and run your licence. Without them we cannot provide Pro.
Who we share data with
- Stripe processes payments, subscriptions, and the Customer Portal. For some purposes, such as preventing fraud and meeting financial regulations, Stripe acts as a separate controller under its own privacy policy.
- Cloudflare, Inc. hosts this website and our licence service and stores the licence records.
- Google serves the fonts used on this website, so your browser sends your IP address to Google when a page loads. Google also provides the email service we use to answer your emails.
- GitHub (owned by Microsoft) hosts the app downloads, so GitHub sees your IP address when you download the app.
- HMRC and professional advisers, such as an accountant, where we need to share records for tax or legal reasons.
International transfers
Stripe, Cloudflare, Google, and GitHub may process data outside the UK, including in the United States. Where data goes to the US, we rely on the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") for providers certified to it. Otherwise, the provider's data terms use the ICO-approved safeguards, such as the International Data Transfer Addendum to the EU Standard Contractual Clauses. Contact us if you would like more information about these safeguards.
How long information is kept
- Licence records are kept while your subscription is active and deleted within 12 months after it ends, unless we still need them for an open billing, support, or legal matter.
- Payment and sales records are kept for as long as HMRC requires. For a sole trader that is currently at least 5 years after the 31 January Self Assessment deadline for the relevant tax year, so roughly 6 to 7 years.
- Support emails are kept for up to 2 years after the conversation ends, or longer if they relate to a payment or dispute.
- Stripe and Cloudflare also keep some data under their own retention rules, including for legal and security reasons.
- Your theme preference stays in your browser until you change it or clear site data.
Cookies and local storage
This website does not set its own cookies. If you pick the light or dark theme, your choice is saved in your browser's localStorage so the site remembers it. That is used only to provide the setting you asked for, so it does not need consent. Cloudflare may set a strictly necessary security cookie to protect the site from bots and abuse. Stripe's Checkout and Customer Portal pages are run by Stripe and use Stripe's own cookies, which Stripe explains in its cookie policy.
Automated decisions
We do not make decisions about you using automated processing that have legal or similarly significant effects. The app simply switches Pro on or off based on whether your subscription is active.
Children
Cardsharpener is a poker analysis tool for adults. It is not directed at anyone under 18, and we do not knowingly collect data from under-18s. If you think a child has subscribed, contact us and we will delete their data where we can.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of your personal data (access);
- have inaccurate data corrected (rectification);
- ask us to delete your data (erasure);
- ask us to limit how we use your data (restriction);
- object to us using your data where we rely on legitimate interests (objection);
- receive data you gave us in a reusable format, where we use it to perform our contract with you (portability).
Some rights have limits. For example, we may need to keep payment records for tax purposes even if you ask us to delete them. To use any of these rights, email lukesmith5918@gmail.com. It is free, and we will reply within one month. You can update your email address, billing address, and card yourself in the Stripe Customer Portal.
If you are unhappy with how your data is handled, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your data, we will email subscribers before it takes effect.