Privacy Policy

Last updated: November 04, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. We collect, use, and disclose Your information as described in this Privacy Policy and, where required by applicable law, only where We have a valid legal basis to do so, including Your consent (where consent is required).

The Short Version

PostUp Poker helps people organize private home poker nights. We collect only what that takes: an email address to sign in, the table names You choose, and what You and Your house put into the Service (games, answers, high hands, photos and Board posts).
We do not ask for Your real name, phone number, birthday, address or location.
We do not sell Your Personal Data, share it for targeted advertising, or track You across other apps and websites. There are no ads and no analytics tools in the Service.
Your house's content is visible only to that house's members.
PostUp Poker does not handle money between players.
You can delete Your Account at any time from inside the app (see Deleting Your Account).

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access Our Service or parts of Our Service. An Account is created when You sign in to the Application with Your email address.
Application refers to PostUp Poker, the software program provided by the Company.
Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to Saltless Sea Studios LLC, 202 N Cedar Ave, Ste 1, Owatonna, MN 55060-2306.
Cookies are small files that are placed on Your computer, mobile device or any other device by a website.
Country/State refers to: Minnesota, United States.
Device means any device that can access the Service, such as a computer, a cell phone or a digital tablet.
Do Not Track (DNT) is a concept that has been promoted by U.S. regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing Internet users to control the tracking of their online activities across websites.
Host means a User who creates and runs a House.
House means a private group in the Service, created by a Host, whose members organize games together.
Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. We use "Personal Data" and "Personal Information" interchangeably unless a law uses a specific term.
Player means a User who belongs to a House through the Application.
Service refers to the Application or the Website or both.
Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, or to perform services related to the Service.
Table Name means the name You choose to be shown as inside a House. It can be a first name or a nickname.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
User means any individual who accesses or uses the Service.
Website refers to PostUp Poker, accessible from https://postuppoker.com.
You means the individual accessing or using the Service.

Collecting and Using Your Personal Information

Types of Data Collected

Personal Data You Give Us

Email address. Used to sign in: We email You a one-time code, so there is no password. Your email address is not shown to other Users, including Hosts.
Table Names and a default display name. Your default display name starts as the part of Your email address before the "@" until You change it. Table Names are free text, so please choose a first name or nickname rather than Your full name.
Profile choices. The avatar You pick from Our built-in artwork (You cannot upload a photo of Yourself as an avatar), its color, Your theme and Your notification settings.
House information (Hosts). The House name, game schedule, game details such as date, time, seat count and any note, and the time zone of Your Device, which We use to show game times correctly.
Game activity. Your answers to games (In, Late with an arrival time, or Out), standby positions, whether a Host answered on Your behalf, and end-of-night check-ins recording who played.
High hands. The cards, a short description, the Player's Table Name, and an optional photo.
Board posts. Announcements Hosts post to their House, including mentions of Players.
Invites. When a Host invites someone, the name the Host types for them and, if the Host chooses to add one, their email address.
Messages to Us. Anything You send Us by email, such as support requests.
Updates list. If You sign up for news on the Website: Your email address, which page You signed up on, and when You confirmed. We use it only to send You PostUp Poker news, and it is never shown to anyone.

Information We Do Not Collect

We do not collect Your real or legal name, phone number, postal address, date of birth, precise location, contacts, or advertising identifiers. We do not use Your Device's microphone. We remove location and other hidden details (EXIF metadata) from every photo before it is stored.

Usage Data

Usage Data is collected automatically when using the Service. It is limited to:

Server logs. Our servers record each request, including the IP address it came from, the time, and the address requested. We use these logs only for security and to fix problems.
Device push tokens. If You allow notifications, We store a push token for Your Device and its type (iPhone or Android) so We can send You notifications.
Abuse-prevention records. To enforce limits that stop spam and abuse, We record when certain actions happen (for example, creating a House, posting, logging a high hand, or entering a wrong invite code), linked to the Account that did them.
Bot checks. When You sign in, and when You sign up for updates on the Website, Cloudflare Turnstile checks that You are a person and not an automated program. See Service Providers.

We do not use analytics, session recording, crash-reporting or advertising tools.

Information Collected While Using the Application

While using Our Application, in order to provide features of Our Application, We may collect, with Your prior permission:

Pictures from Your Device's camera and photo library, only when You choose to attach a photo to a high hand.

Photos are uploaded to Our Service Provider's private storage after being resized and stripped of location data. They can only be viewed by members of the House they were posted in, through links that expire after one hour. You can enable or disable access to Your camera and photos at any time through Your Device settings.

The Application also stores Your sign-in session on Your Device, encrypted with a key held in Your Device's secure storage, and remembers which House You last viewed.

Cookies and Similar Technologies

We do not use advertising Cookies, tracking Cookies, web beacons or email tracking (Our emails do not track whether You open them).

The Website currently sets no Cookies.

Our free tools do not use Cookies. The Seat Randomizer keeps the draw You are running, including any names You type, in Your browser's local storage on Your Device, so You can close the page and come back to it. It is never sent to Us and We cannot see it. The tool deletes it once it is more than 12 hours old, the next time You open the tool, and You can remove it at any time by clearing Your browser's site data.

Cloudflare Turnstile may collect technical signals from Your browser to perform its bot check, as described in the Turnstile Privacy Addendum.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain Our Service, including running Houses, games, answers, standby lists, high hands and the Board.
To manage Your Account: to manage Your registration as a User of the Service and sign You in.
To contact You: to send sign-in codes by email and, if You allow them, push notifications about Your games and Houses (for example, new games, reminders, standby seats opening, cancellations and Board posts). These are part of the Service, not marketing.
To send You news about PostUp Poker, only if You have opted in. You may opt out at any time by using the unsubscribe link in any such email or by contacting Us.
To keep the Service safe: to prevent spam, abuse, fraud and automated sign-ups, to enforce Our Terms and Conditions, and to protect Users.
To manage Your requests: to answer support requests and privacy requests.
To improve the Service: to fix problems and understand, in general terms, how features are used.
For business transfers: We may use Your Personal Data to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, in which Personal Data held by Us about Our Service Users is among the assets transferred.

We do not use Your Personal Data for targeted advertising, and We do not build profiles about You to sell or share.

Who Can See Your Information

Members of Your House can see Your Table Name in that House, avatar and color, Your answers to games (In, Late and Your arrival time), standby positions, who played, high hands and photos posted in that House, and Board posts.
The Host of a House can also see pending Players waiting for approval, the details of invites they sent, and can answer games on a Player's behalf.
Your email address is never shown to other Users, including Hosts.
Nothing You add to a House is public or visible to people outside that House.

Sale of Personal Data

We do not sell Personal Data, and We have not sold Personal Data. We do not share Personal Data with third parties for targeted (cross-context behavioral) advertising. We do not collect sensitive data such as precise location, health information or biometric data.

We may share Your Personal Data in the following situations:

With Service Providers that run parts of the Service for Us, listed in Service Providers. They may use it only to provide their services to Us.
With other Users in Your House, as described in Who Can See Your Information.
For business transfers: We may share or transfer Your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
For legal reasons, as described in Disclosure of Your Personal Data.
With Your consent: We may disclose Your Personal Data for any other purpose with Your consent.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. The periods below are maximum periods ("up to"), and We may delete data sooner when it is no longer needed.

Account information (email address, display name, profile choices, notification settings): until You delete Your Account.
House content (games, answers, check-ins, high hands, photos, Board posts): for as long as the House exists, unless the Host or the poster deletes it sooner. Hosts can delete past games, high hands, photos and posts.
When You leave or are removed from a House: Your answers to upcoming games are deleted. That House keeps its past records (for example, Your Table Name on past games and high hands) so its history stays accurate.
Unfinished sign-ups (an email address that never entered its sign-in code): deleted after 24 hours.
Updates list: until You unsubscribe, which deletes Your address. Sign-ups that are never confirmed are deleted after 7 days.
Push tokens: until You sign out, delete Your Account, or Your Device tells Us the token no longer works.
Support emails: up to 24 months after Your request is resolved.
Backups: We keep encrypted backups of the Service's data for disaster recovery. Nightly backups are kept for 32 days and one monthly backup is kept for up to 12 months, after which they are deleted. Data You delete may remain in these backups until they expire; backups are not restored except to recover from a failure, and deleted data is not put back into use.

We may retain Personal Data beyond the periods stated above where the law requires it, where it is necessary to establish, exercise, or defend legal claims, or to investigate and report illegal content.

Transfer of Your Personal Data

The Service is offered in the United States only. Your information is processed and stored in the United States by Us and Our Service Providers. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.

Deleting Your Account

You can delete Your Account at any time inside the Application: open Account Settings, tap Delete Account, and confirm. Deletion happens right away.

If You cannot use the Application, email privacy@postuppoker.com from the email address on Your Account and ask Us to delete it. We will confirm by email and complete the deletion within 30 days.

When You delete Your Account, We delete:

Your Account, email address, profile choices, notification settings and push tokens, and Your sign-in record;
Your memberships in every House, with Your answers and check-ins;
Every House You host, with everything in it: its games, answers, check-ins, high hands, photos, Board posts and invites.

What remains:

In Houses hosted by other people, high hands You were part of stay in that House's history under the Table Name You used there, no longer linked to Your Account.
Copies in Our encrypted backups until they expire (up to 12 months, see above).

Your Privacy Rights

Wherever You live in the United States, You can ask Us to:

tell You what Personal Data We hold about You and give You a copy in a portable format;
correct inaccurate Personal Data (You can also change most of it in the Application yourself);
delete Your Personal Data (see Deleting Your Account);
stop sending You marketing email.

To make a request, email privacy@postuppoker.com. To protect Your Account, We may ask You to confirm the request from the email address on Your Account. We will respond within 45 days. We will not treat You differently for using these rights.

If We decline Your request, We will explain why. You can appeal by replying to Our decision within 60 days; We will review it again and answer within 45 days, and if You are still not satisfied You may contact Your state Attorney General.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Reporting Child Sexual Abuse Material

If We become aware of child sexual abuse material in the Service, We report it, along with information about the Account involved, to the National Center for Missing & Exploited Children (NCMEC) as federal law requires, and We preserve the related information as the law requires.

Other Legal Requirements

The Company may disclose Your Personal Data in the good-faith belief that such action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability

Security of Your Personal Data

We protect Your Personal Data with measures such as encrypted connections (HTTPS) for all traffic, private photo storage with short-lived links, encrypted backups, and two-factor authentication on the accounts that run the Service.

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security. If a security incident affects Your Personal Data, We will notify You as required by law.

Service Providers

The Service Providers below process Personal Data for Us only to provide their services. Each is bound by its contract with Us, or by its published terms and privacy policy, to protect Your data with protection at least equal to that described in this Privacy Policy.

Supabase stores the Service's database and photos and handles sign-in.Their Privacy Policy can be viewed at https://supabase.com/privacy
Akamai (Linode) hosts Our servers and the Website.Their Privacy Policy can be viewed at https://www.akamai.com/legal/privacy-statement
Google Workspace sends Our emails (such as sign-in codes), receives Your emails to Us, and stores Our encrypted backups (Google Drive).Their Privacy Policy can be viewed at https://cloud.google.com/terms/cloud-privacy-notice

Notifications and App Updates

Expo delivers push notifications to Your Device and delivers updates to the Application.Their Privacy Policy can be viewed at https://expo.dev/privacy
Google Firebase Cloud Messaging delivers push notifications to Android Devices.Their Privacy Policy can be viewed at https://policies.google.com/privacy
Apple Push Notification service delivers push notifications to iPhones.Their Privacy Policy can be viewed at https://www.apple.com/legal/privacy/

You can turn notifications off at any time in the Application's Account Settings or in Your Device settings.

Bot Protection

Cloudflare Turnstile checks that sign-ins and sign-ups for updates come from people, not automated programs. It runs invisibly and collects technical signals such as Your IP address and browser information. Cloudflare's use of this data is described in the Turnstile Privacy Addendum.Their Privacy Policy can be viewed at https://www.cloudflare.com/privacypolicy/

Emails From Us

We send emails that are needed to run the Service, such as sign-in codes.

We send news and announcements about PostUp Poker only if You opt in. If You sign up for updates on the Website, We first send an email asking You to confirm. Every such email includes an unsubscribe link and Our postal address, and We honor unsubscribe requests promptly.

We use Google Workspace to send emails. Our emails do not contain tracking pixels.

"Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)

We do not track You across other websites or apps, and We do not allow third parties to do so through Our Service, so Our Service does not change its behavior in response to Do Not Track signals. Cloudflare Turnstile collects technical signals for bot protection only, as described above.

State Privacy Notices

California: This Privacy Policy is intended to meet the California Online Privacy Protection Act (CalOPPA). We do not share Personal Data with third parties for their own direct marketing purposes.
Nevada: We do not sell covered information as defined by Nevada law. You may still send a request to opt out of any future sale to privacy@postuppoker.com.
Minnesota, Texas and other states with consumer privacy laws: We do not sell Personal Data, including sensitive data, and We offer the rights described in Your Privacy Rights to all Users in the United States.

Children's and Minors' Privacy

PostUp Poker is only for adults 18 and older. The Service is not directed to children, and We do not knowingly collect Personal Information from anyone under 18.

If You are a parent or guardian and You believe Your child has provided Us with Personal Information, please contact Us. If We learn that We have collected Personal Information from anyone under 18, We will delete that Account and its information as soon as reasonably possible.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us, such as the app stores. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

If We make a material change, We will let You know by email and/or a prominent notice in the Service before the change becomes effective. We will not use Personal Data We have already collected in a materially different way than described when it was collected without asking for Your consent.

Contact Us

If You have any questions about this Privacy Policy or Your Personal Data, You can contact Us:

By email: privacy@postuppoker.com
By mail: Saltless Sea Studios LLC, 202 N Cedar Ave, Ste 1, Owatonna, MN 55060-2306