Privacy Policy

1. Who we are

SophiesPick is operated by Carlos Hurtado (“SophiesPick,” “we,” “us”). This Policy explains how we handle information when you visit our website, play games, participate in Clubs or Events, or contact us.

SophiesPick provides free-to-play poker. Virtual chips have no monetary value and cannot be purchased or redeemed through the service.

Privacy contact: support@sophiespick.com.

2. Information we collect

Depending on the features you use, we collect:

• Account and authentication information: email addresses, account and authentication-provider identifiers, sign-in records, and session information.
• Profile information: usernames, display names, selected avatars, and visibility settings.
• Guest information: player names, session identifiers, and associated gameplay records. Guest participation is not necessarily anonymous.
• Gameplay information: table participation, actions, results, play-chip records, histories, statistics, and Match Play ratings.
• Club and Event information: memberships, roles, invitations, responses, posts, comments, reactions, images, notifications, and organizer activity.
• Support and moderation information: correspondence, reports, relevant content, and moderation records.
• Technical information: connection and request information, operational diagnostics, errors, and identifiers used for security and abuse prevention.

Google or Microsoft sign-in provides information needed to authenticate you, including provider identifiers and email information. We do not receive your Google or Microsoft password.

3. How we use information

We use information to operate accounts and games; maintain histories, statistics, and ratings; provide Clubs and Events; send service communications; investigate cheating and abuse; provide support; maintain security and reliability; and meet applicable legal obligations.

4. Information visible to others

Player names, avatars, participation, results, and submitted content may be visible to other users through the features you use.

Profile privacy settings do not necessarily hide participation within games or Clubs. Public Club content may be accessible beyond Club membership. Organizers and moderators have access relevant to their permissions.

Avoid sharing sensitive information about yourself or others. Other users may retain copies of information you share.

5. Providers and disclosures

We use:

• Microsoft Azure: backend hosting, databases, media and backup storage, authentication email delivery, and monitoring.
• Vercel: website hosting and delivery.
• Microsoft 365: support email.
• Google and Microsoft: authentication when you use their sign-in services.

Providers process information relevant to their services. Google and Microsoft also process information under their own privacy policies, including information associated with authentication interactions.

We may disclose information when reasonably necessary to comply with applicable law or valid legal process, investigate abuse, or protect the rights and security of users and the service.

6. Cookies and browser storage

SophiesPick uses session storage, local storage, IndexedDB, and cookies associated with certain features to support authentication, game recovery, practice games, and preferences.

Google sign-in components load on the sign-in page. Authentication providers may use their own cookies and related technologies.

We use Vercel Web Analytics to understand visits to selected public pages on sophiespick.com. Vercel processes page-view information, which may include the page URL, referrer, timestamp, approximate location, and browser, operating-system and device information. Vercel describes this service as using a hash derived from incoming requests instead of third-party cookies to distinguish visitors; that visitor identification is discarded after 24 hours. This does not mean all analytics records are deleted after 24 hours.

Our analytics integration excludes authentication and private routes, URLs containing query parameters or fragments, and potentially sensitive referrers. We do not send custom analytics events, player emails, authentication tokens, cards or private game details through this integration. Analytics statistics describe public website traffic, not individual player histories.

Some browser information persists until cleared. You can manage stored site data through your browser, but clearing or blocking it may sign you out, remove local practice information, or affect functionality.

Clearing browser storage does not erase server-side information.

7. Retention and backups

Account and gameplay information supports continuing accounts, histories, statistics, and ratings. Other records support Clubs, moderation, security, support, and legal needs.

Current retention settings include:

• Application monitoring: relevant Azure Application Insights tables are configured for 90-day retention. Certain other Azure operational log tables are configured for 30 days. These periods do not cover every hosting or provider log.
• Database backups: PostgreSQL automatic backups are configured for 14-day retention.
• Retained encrypted database exports: covered files become eligible for lifecycle deletion once more than 30 days have passed since their last modification. Processing is asynchronous, so deletion is not guaranteed exactly on day 30. This rule does not establish deletion of every separate copy, snapshot, or version.

There is no single automatic deletion period covering all accounts, gameplay records, Club content, media, moderation records, or support correspondence. Inactivity does not automatically erase your information. Expiration of a sign-in link or session does not necessarily immediately remove its stored record.

Account closure or a soft-deleted status does not physically erase all personal information. Removal from active systems also does not necessarily immediately remove backups, cached copies, or other retained copies.

You can contact us about retention or deletion. Any continued retention following a valid request must have an applicable lawful basis; technical limitations do not remove your legal rights.

8. Privacy requests

Email support@sophiespick.com to request access, correction, deletion, or account closure, or to raise a privacy concern.

Requests are handled individually. We do not currently provide a complete self-service account export or erasure function. Some profile information can be corrected through existing profile controls.

We may ask for information reasonably necessary to verify your identity and locate records. Do not send passwords, sign-in links, or session tokens.

Depending on applicable law, you may also have rights to portability, restriction, objection, withdrawal of consent where processing relies on consent, or a complaint to a privacy regulator.

We will respond within applicable legal deadlines and explain the action taken, any outstanding portion, and any applicable legal exception. We will not describe account deactivation as complete deletion.

9. Security

We use safeguards intended to protect information, including access restrictions, protected connections, and security monitoring. No system can guarantee complete security.

10. Age eligibility

SophiesPick is intended for people who are at least 18 and legally adults where they live.

We do not routinely collect dates of birth or government identification to verify age. Google or Microsoft sign-in does not establish age eligibility.

If you believe an underage person is using the service, contact support@sophiespick.com.

11. International processing

SophiesPick operates from the United States. Our providers may process information in the United States and other countries, where privacy laws may differ.

12. Beta changes and policy updates

Beta changes or resets may affect accounts, chips, histories, and ratings. We will provide advance notice of planned resets when reasonably possible. Resets do not necessarily erase all associated personal information.

We will post changes to this Policy with an updated effective date and provide additional notice where required by law.

13. Contact

Carlos Hurtado — SophiesPick

support@sophiespick.com