Privacy policy
Your hand histories are the most personal thing you can hand a poker tool. We use them for one purpose: building your analysis. We don't sell them, we don't share them with other players, and we run no advertising or analytics trackers of any kind.
Who is responsible
The data controller is SecureMyData (Entreprise individuelle (EI)), 96 chemin des Sources, 38090 Roche, France — SIREN 805027760. Full company details are on our legal notice.
For anything in this policy, write to [email protected].
What we collect
Your account
Your email address, a hashed password (we never store the password itself), whether your email is verified, and the game type you selected. If you contact us, we keep your message.
Your hand histories
The hand history files you upload through the Leakpok Agent, stored in their original form, plus everything we derive from them: the hands themselves, your screen names, your results, and the statistics that make up your report.
Technical data
To keep the service running and secure we record your IP address and browser user-agent when
you sign in, and failed login attempts with the email tried and the IP it came from. We use
two cookies: lf_session to keep you signed in, and lf_period to
remember which period you last looked at. Both are strictly functional — no advertising or
tracking cookies are set.
If you left your email on our launch page
We store that address, the source you came from, your IP and user-agent, so we can tell you when we launch. Nothing else — and you can ask us to delete it at any time.
About the other players in your hands
Hand histories inevitably contain the screen names of the opponents you played against. We store those screen names and the playing statistics computed from the hands you sent us — that's what powers the Opponents and Population features.
What we do not do: we never try to identify who is behind a screen name, we never link it to a real person, and we never sell or publish these statistics. An opponent's screen name is only ever visible to players who actually played against them, in their own hands.
If you are a player and want your screen name removed from our statistics, email us at [email protected].
Why we're allowed to (GDPR)
- Account & analysis
- Performance of our contract with you — no hands, no report.
- Security & abuse
- Legitimate interest: sessions, login attempts, rate limiting.
- Opponent statistics
- Legitimate interest in providing the analysis you asked for, limited to pseudonymous screen names.
- Launch mailing list
- Your consent, given when you submitted the form.
Who else sees your data
We do not sell your data, and we never share your hands with other players or with your poker room. We run no advertising network, no analytics, and no tracking pixels.
We rely on a small number of providers to operate the service:
- Contabo GmbH — hosting. Servers located in Lauterbourg, France.
- Cloudflare — traffic proxy, DNS and email routing for our domain.
- jsDelivr and code.jquery.com — public CDNs serving stylesheets and scripts. Loading a page reveals your IP address to them.
- Our email provider, for account emails such as verification and password reset.
Your data is stored in the European Union. We may also disclose data where the law requires it.
How long we keep it
Your account, hands and analysis are kept for as long as your account exists, because the report is cumulative — older hands keep feeding it. Delete your account and we delete them.
Sessions and login attempts are short-lived and cleared automatically. Launch-page emails are kept until you ask us to remove them.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, hand it over in a portable format, or object to a particular use. Write to [email protected] and we'll answer within one month.
Deletion is currently handled by us on request rather than by a button in the app — we'd rather say so plainly than pretend otherwise. Ask, and we remove your raw files, your hands, your report and your account.
If you think we've mishandled your data, you can complain to the French data protection authority, the CNIL.
Security
The site is served over HTTPS. Passwords are hashed, upload tokens are revocable at any time from your profile, and each account's data is isolated at the database level. Your raw hand history files are stored outside the public web root and are never served publicly.
No system is perfect. If you find a security problem, tell us at [email protected] before disclosing it — we'll take it seriously.
Changes
If we change this policy in a way that matters, we'll update the date at the top and tell account holders. Leakpok is in beta and the product is moving — this page moves with it.