Legal
Privacy Policy
We collect as little as we can: enough to send you a licence key, take payment and make sure keys are used fairly. Your hand histories and poker stats stay on your computer.
Last updated: 27 September 2026
1. Who is responsible
The data controller is [YOUR FULL LEGAL NAME], trading as Flopnado, [YOUR BUSINESS ADDRESS, IRELAND]. Contact: flopnado@protonmail.com.
2. The short version
- We use your email address to send your trial or licence key and to prevent repeated trials.
- Stripe handles payments. We never see your card details.
- The app sends your licence key and an anonymous computer ID to our licence server to activate and check your licence.
- Your hand histories, stats and results are processed on your own computer and are not uploaded to us.
- We don't sell your data, and we don't send marketing emails unless you've asked us to.
3. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address (trial form) | To create and email your trial key, and to make sure each person gets one trial. | Performing a contract at your request; legitimate interest in preventing trial abuse |
| Name, email, billing country and order ID (purchase) | To issue your lifetime licence, send your key, provide support, and keep accounting and tax records. | Performing a contract; legal obligation (tax records) |
| Licence key and computer ID | To activate your licence, enforce the 2-computer limit and one trial per computer. | Performing a contract; legitimate interest in preventing licence misuse |
| IP address and browser data (website) | To deliver the website and block bots on the trial form (hCaptcha). | Legitimate interest in running a secure website |
| Emails you send us | To answer your questions and give support. | Legitimate interest; performing a contract |
4. What the app sends
The Flopnado app contacts our licence server only to activate, check or deactivate your licence. Each time, it sends your licence key and a computer ID — an identifier generated from your computer so a key can be limited to 2 machines. It does not contain your name, files or poker data.
Your hand history files, opponent stats, session results and settings are read and stored locally on your computer. We don't receive them.
5. Who processes data for us
We use these service providers. Each only processes data to provide their service to us.
| Provider | What they do |
|---|---|
| Stripe | Takes payments and handles card details. Stripe is also an independent controller for some data, such as fraud prevention — see Stripe's privacy policy. |
| Cloudflare | Runs our licence server and stores licence records (email, key, computer IDs, expiry). |
| Resend | Sends the emails containing your trial or licence key. |
| Vercel | Hosts this website. |
| hCaptcha (Intuition Machines) | Checks the trial form is used by a person, not a bot — see hCaptcha's privacy policy. |
| GitHub | Hosts the installer download. GitHub receives your IP address when you download. |
| Google Fonts | Serves the fonts used on this website. Google receives your IP address when the page loads. |
| Proton | Hosts our support email inbox. |
6. Transfers outside the EU
Some of these providers are based in, or use servers in, the United States. Where personal data leaves the European Economic Area, it's protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.
7. How long we keep it
- Trial records (email, key, computer ID): kept for as long as we need them to prevent repeated trials, and deleted on request where we're able to.
- Paid licence records: kept for as long as your licence is active, so your key keeps working and we can help if you lose it.
- Payment and tax records: kept for 6 years, as Irish tax law requires.
- Support emails: kept for as long as needed to deal with your request, and then for up to 2 years.
8. Cookies
This website doesn't use advertising or analytics cookies. hCaptcha may set cookies or use similar technology on the trial form, which is strictly necessary to protect it from abuse. Stripe sets its own cookies on its checkout page.
9. Your rights
Under the GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct it if it's wrong;
- ask us to delete it, where we don't have to keep it;
- object to, or ask us to restrict, how we use it;
- ask for it in a portable format.
To make a request, email flopnado@protonmail.com. We'll respond within one month. Deleting your licence record means your key will stop working.
You also have the right to complain to the Irish Data Protection Commission, or to the data protection authority where you live.
10. Security
Data is sent over encrypted connections (HTTPS). Access to licence records and the dashboards of the services above is limited to us.
11. Children
Flopnado is for adults only. We don't knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we'll delete it.
12. Changes
If we change how we use personal data, we'll update this page and the date at the top. For significant changes, we'll let licence holders know by email.