Privacy Policy

1. Who We Are and What This Covers

Alien Poker Club is a play-money poker training simulator operated by Alien Stagecraft LLC. This policy explains exactly what we collect, why we have it, where it lives, and how you get rid of it.

It covers the Alien Poker Club website and the game itself. It does not cover other companies’ sites, even ones we link to.

The short version: we collect the minimum needed to run a poker trainer and bill an annual subscription. We do not sell data, we do not run ads, and we do not track you across the web.

2. What We Collect

Everything we hold about you falls into one of the rows below. There is no hidden category.

Guest sessions require no email address and create only a temporary record, deleted automatically after the session ends. The anonymous hand records described above are kept.

3. What We Do Not Collect

• No card numbers. Card details are entered on Stripe’s hosted payment page and never touch our servers. We could not show you your own card number if you asked.
• No advertising or cross-site tracking cookies. None. There is no pixel, no retargeting tag, no social widget phoning home.
• No third-party ad networks. The site carries no advertising.
• No data sales. We do not sell, rent, or trade your data, and we do not share it for anyone else’s advertising.
• No location tracking. We do not request or record GPS or precise location.
• No contact list, microphone, camera, or device scanning. It is a poker trainer in a browser tab.

4. Cookies and Local Storage

We use the smallest set that makes a logged-in site work:

• Session cookie — keeps you logged in as you move between pages. Strictly necessary.
• Visitor cookie — a random id (no personal data in it) that remembers this browser for a year. It lets us see whether anonymous visitors come back and applies the daily free-table allowance fairly to a browser rather than to a whole household’s IP address. A companion value summarises coarse device traits (screen size, time zone, language) for the same purpose, and a session-only value notes which page you arrived on and the site that linked you here (a search engine, a forum, or nothing). We also keep the approximate location (country, and city where our network provider reports it) that your address resolves to at the time. Neither is shared with anyone, used for advertising, or read by any third party. If this browser has been used to sign in, the game offers a sign-in form instead of a link; the page is only told yes or no, never which account.
• CSRF token — a security value that proves a form submission came from you and not from a hostile site.
• Browser local storage — stores your game settings and interface preferences on your own machine so the table looks the way you left it. This stays in your browser; clearing your browser data clears it.

The page-view analytics we use set no cookie at all. The visitor cookie above is ours alone and is the only cookie that outlives your session; clearing your browser’s site data removes it.

5. Third Parties We Rely On

Running the service means a handful of vendors process some data on our behalf. Each has its own privacy policy, which we encourage you to read.

• Stripe — payment processing. Receives your payment details directly and holds the customer and subscription records we reference.
• Postmark — email delivery (verification, password reset, welcome, and product-update emails) and forwarding contact-form messages to our inbox. Receives your email address and the message content.
• Cloudflare — content delivery, security, and privacy-preserving aggregate analytics. Sees request metadata such as IP address in the course of routing and protecting traffic.
• Google Fonts — serves the two typefaces the site is set in. Your browser requests the font files directly from Google, which sees your IP address and browser details in the course of serving them. No cookie is set and we send Google nothing about you.
• Microsoft Advertising — where we buy search ads. If you reach us from one of our ads, we later tell Microsoft that the click led to someone playing, using the click code from the link. We send no personal details, and there is no Microsoft tracking tag on this site.
• Our hosting provider — runs the servers and database where the data in section 2 is stored.

We do not add vendors casually, and we do not use these vendors to build a marketing profile of you.

6. How We Use Your Data

Only for the following:

• Running the game — dealing hands, saving hand histories, showing your stats and reviews.
• Enforcing the free-tier daily hand limit, the first-month allowance and the guest time allowance.
• Billing and managing annual Premium subscriptions.
• Securing accounts — login verification, password resets, rate limiting, investigating abuse.
• Sending transactional email you asked for or that your account requires.
• Emailing account holders about the service — new features, coaching tips, and occasional offers. You can opt out at any time using the unsubscribe link in any such email, the switch on your account page, a reply to any such email, or a note to [email protected], and we honor that promptly.
• Fixing bugs and improving the game, including improving the AI and strategy advice using aggregate, non-identifying gameplay data and the anonymous hand records described in section 2.
• Meeting legal, accounting, and tax obligations.

Explicitly: your data is not sold and not shared for advertising. We never sell, rent, or share your email address with anyone, and we do not share it with any advertising service.

7. How Long We Keep It

• Account data — kept while your account is active. Deleting your account removes it.
• Hand histories — kept until you delete them or delete your account.
• Anonymous hand records — kept indefinitely. They are not connected to any account, so deleting a hand or your account does not remove them.
• Rate-limit records — purged after 24 hours.
• Email opt-outs — when you unsubscribe from product updates we keep a record of that choice, and when you made it, so that we keep honoring it.
• Audit log and billing records — retained as long as required for legal, tax, and dispute-resolution purposes. Exact retention term to be confirmed by Alien Stagecraft LLC.
• Analytics — aggregate only, and not tied to your account.

8. Your Rights and Choices

Whatever jurisdiction you are in, you can ask us to:

• Access the personal data we hold about you.
• Correct anything inaccurate.
• Export your data, including your hand histories, on request.
• Delete your account and its data. This one is self-service — you can do it yourself from your account page at any time, and it removes the account and its hand histories. The anonymous hand records described in section 2 are not connected to your account and are not removed.
• Stop product-update email at any time (unsubscribe link or account page).

To make any other request, email [email protected] from the address on the account. We may ask you to confirm your identity before acting on a request, and we will not charge you or penalise you for making one.

Depending on where you live, you may have additional statutory rights — for example California-style rights to know what is collected, to delete it, and to opt out of its sale (we do not sell it), or EU and UK GDPR-style rights of access, rectification, erasure, restriction, portability, and objection. We aim to honor these kinds of requests for everyone regardless of location. We are describing the substance of those rights here; we are not claiming any formal certification or audited compliance program.

9. Children

Alien Poker Club is for adults aged 18 and over. It is not directed at children and we do not knowingly collect personal data from anyone under 18.

If you believe a minor has created an account, email [email protected] and we will remove it and its data.

10. Security

What we actually do: passwords are stored only as Argon2id hashes and are never recoverable; traffic is served over HTTPS; login attempts and API requests are rate limited; card data never reaches our servers because Stripe handles it; and account events are logged so we can investigate problems.

Honestly, though: no system is perfectly secure. We cannot guarantee that a breach will never happen. Use a unique password, and tell us at [email protected] if something looks wrong with your account.

11. International Users

Our servers and our vendors’ primary processing are in the United States. If you use the service from outside the US, your data will be transferred to and stored in the US, where privacy laws differ from those in your own country. By using the service, you understand and accept that transfer.

12. Changes to This Policy

If we change what we collect or who processes it, we will update this page and the “last updated” date. For material changes we will notify you by email or in the app. Continuing to use the service after a change takes effect means you accept the updated policy.

13. Contact

Privacy questions, data requests, or anything that looks wrong:

Alien Stagecraft LLC
[email protected]
or the contact form

See also our Terms of Service and Refund Policy.