Privacy policy
In short
- No account. We never ask for your name, email, phone number, location or contacts.
- No advertising, no analytics, no tracking, and no third-party SDKs in the app.
- Play chips only: there are no payments, so there is no payment data.
What reaches our server
To seat you at a table and let every player check every hand, the app sends the server the following. All of it is linked to your player ID, and all of it is used only to run the game.
- Player ID. A pseudonymous identifier derived from a signing key your device creates on first launch. It is not tied to your Apple ID or your name. The nickname on your seat is computed from it on your device and is never sent.
- Gameplay. Your seat, your actions, chip counts, the cards revealed at showdown, and the signed shuffle and decryption proofs your device produces.
- Connection details. The IP address you connect from. Our web server logs it with each request, and if your connection trips a rate limit the server records it with your player ID, to handle abuse.
How long we keep it
| Where | What | Kept for |
|---|---|---|
| Server logs | Player ID, table actions, and the IP address of rate-limited connections | about 14 days |
| Hand records | Per-hand shuffle proofs, seats and chip counts | latest 1,000 hands |
| Server database | Connection times, rate-limit records (player ID and IP address), dropped-hand and timeout counts, hand settlements | until deleted on request |
| Web server logs | IP address, time and page requested, for this website and the API | host's standard log rotation |
The server database has no automatic expiry yet. We delete records on request (see below).
What other players see
Everyone at your table receives your player ID (shown as its nickname), your actions, your chip count, any cards you show at showdown, and the proofs your device produces, so that each of them can verify the hand independently. Their devices may keep what they received. Your hole cards are encrypted to a key only your device holds and are revealed only if you show them.
Some seats are companion players run by us so you can play when nobody else is around. They mark themselves as bots at the table.
What stays on your device
- Your signing key, in the iOS Keychain, restricted to this device. It is not synced to iCloud. iOS may keep it after the app is deleted.
- Your hand history, seat permissions and auto-fold setting, in the app's own storage. Deleting the app removes them.
Sharing
We do not sell or share this data with anyone. It is stored on servers rented from our hosting provider, who processes it only to run that infrastructure.
The app can also join a friends table: a server someone runs on their own computer, reached by the address or link they give you. At such a table the same kinds of data go to that person's server instead of ours. We never receive it, and what happens to it there is up to whoever runs that server. Your player ID is the same at every table, because it comes from the one signing key on your device, so the person running a friends table sees the same ID we do.
Children
OpenPoker simulates casino-style card play. It is intended for adults and is not directed at children.
Deleting your data, and questions
Because there is no account, we cannot look you up by name. Email emiraksoy20260421@gmail.com with roughly when you played and the nickname shown on your seat. We will delete the matching server records within 30 days and tell you when it is done, or tell you if we could not identify them.
Changes
If this policy changes, the new version will be posted on this page with a new effective date.
隐私政策
概要
- 不需要账号。我们从不索取你的姓名、邮箱、电话、位置或通讯录。
- App 里没有广告、没有统计分析、没有跟踪，也没有任何第三方 SDK。
- 只用游戏筹码，没有任何支付，所以也没有支付数据。
哪些数据会到我们的服务器
为了让你入座、让每位玩家都能核验每一手牌，App 会把下面这些发给服务器。它们都和你的玩家 ID 关联，只用于运行游戏。
- 玩家 ID。由设备首次启动时生成的签名密钥推导出的化名标识，和你的 Apple ID、姓名都没有关系。座位上显示的昵称是在你的设备上由它算出来的，从不发送。
- 牌局数据。你的座位、你的每个行动、筹码数、摊牌时亮出的牌，以及你的设备生成的洗牌与解密签名证明。
- 连接信息。你连接时使用的 IP 地址。网站服务器会在每个请求的日志里记下它；如果你的连接触发了限流，服务器会把它和你的玩家 ID 记在一起，用于处理滥用。
保存多久
| 存放位置 | 内容 | 保存期限 |
|---|---|---|
| 服务器日志 | 玩家 ID、牌桌行动、被限流连接的 IP 地址 | 约 14 天 |
| 牌局记录 | 每手牌的洗牌证明、座位与筹码数 | 最近 1000 手 |
| 服务器数据库 | 连接时间、限流记录（玩家 ID 与 IP 地址）、中途掉线与超时次数、每手结算 | 直到应要求删除 |
| 网站服务器日志 | 本网站与 API 的访问 IP、时间、所请求的页面 | 按主机的常规日志轮转 |
服务器数据库目前没有自动过期，我们按你的要求删除（见下文）。
其他玩家能看到什么
同桌的每个人都会收到你的玩家 ID（以昵称显示）、你的行动、筹码数、你在摊牌时亮出的牌，以及你的设备生成的证明，这样每个人都能独立核验这一手。他们的设备可能会保留收到的内容。你的底牌用只有你的设备才有的密钥加密，只有你亮牌时才会公开。
有些座位是我们运行的陪打玩家，方便你在没有别人时也能开局。它们会在牌桌上自报机器人身份。
留在你设备上的数据
- 你的签名密钥，存在 iOS 钥匙串里，只限本机使用，不会同步到 iCloud。删除 App 后 iOS 可能仍会保留它。
- 你的牌局历史、座位授权和自动弃牌设置，存在 App 自己的存储里。删除 App 会一并删除。
共享
我们不出售，也不与任何人共享这些数据。数据存放在向托管服务商租用的服务器上，服务商只为运行基础设施而处理它们。
App 也可以加入朋友局：别人在自己电脑上运行的服务器，通过对方给你的地址或链接进入。在这样的牌桌上，同类数据发往那个人的服务器，而不是我们的。我们收不到这些数据，它们在那边如何处理由运行那台服务器的人决定。你的玩家 ID 在每张桌上都一样，因为它来自你设备上唯一的那把签名钥匙，所以朋友局的主人看到的 ID 和我们看到的是同一个。
未成年人
OpenPoker 模拟的是赌场式纸牌游戏，面向成年人，不以儿童为对象。
删除数据与联系我们
因为没有账号，我们无法按姓名查到你。请发邮件到 emiraksoy20260421@gmail.com，写明大致的游戏时间和座位上显示的昵称。我们会在 30 天内删除对应的服务器记录并告知你结果；如果无法确认是哪些记录，也会告诉你。
政策变更
本政策如有变更，新版本会发布在本页并更新生效日期。