Privacy Policy

This Privacy Policy explains how www.smartpokertour.bg ("the Website") collects, uses, and protects your personal data. We are committed to protecting your privacy and processing your data in compliance with the General Data Protection Regulation (GDPR) and applicable Bulgarian data protection legislation.

Data Controller

The data controller for the Website is Smart Poker Tour, contactable at smartpokertour@gmail.com. For any questions or requests regarding your personal data, please contact us at this email address.

Personal Data We Collect

We collect and process the following personal data:

Account Information (via Google Sign-In)

When you sign in with Google, we receive and store your name, email address, and profile picture. This data is used to create and manage your user account.

Chat Messages

When you use the chat feature, we store your messages along with your display name and avatar. Chat messages are automatically deleted after 90 days.

Analytics Data

With your consent, we collect anonymized usage data through PostHog analytics, including page views, interactions, and general browsing patterns. This data helps us understand how the Website is used and improve the user experience. PostHog does not create person profiles for anonymous visitors.

Profile Claims

If you choose to link your account to a Hendon Mob poker player profile, we store this association.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent — for analytics cookies and tracking (you can grant or withdraw consent at any time via the cookie banner).
  • Contract performance — for providing account features, chat, and profile linking, which require processing your data to deliver the service you requested.
  • Legitimate interest — for essential cookies required to operate the Website (session management, language preferences) and for maintaining the security of the service.

Third-Party Services

We use the following third-party services that may process your data:

  • Google (OAuth authentication) — receives your authentication credentials during sign-in. Google's privacy policy: https://policies.google.com/privacy
  • Convex (database and backend) — stores your account data, chat messages, and application data on servers in the United States.
  • PostHog (analytics) — processes anonymized usage data with your consent. PostHog's privacy policy: https://posthog.com/privacy
  • Vercel (hosting) — serves the Website and may process request logs. Vercel's privacy policy: https://vercel.com/legal/privacy-policy

Cookies

Cookies are small text files stored on your device when you visit a website. The Website uses the following types of cookies:

Essential Cookies (always active)

These cookies are necessary for the Website to function and cannot be disabled. They include authentication session cookies (for keeping you signed in) and locale preference cookies (for remembering your language choice).

Analytics Cookies (require consent)

These cookies are set by PostHog and allow us to count visitors and understand how they navigate the Website. They are only activated when you click "Accept All" in the cookie banner. You can withdraw your consent at any time by clearing your browser's localStorage and cookies.

Managing Cookies

You can manage your cookie preferences through the cookie banner that appears on your first visit. You can also delete cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Website. For more information about cookies, visit www.allaboutcookies.org.

Data Retention

  • Chat messages are automatically deleted after 90 days.
  • Account data (name, email, profile image) is retained for as long as your account exists.
  • Analytics data is retained according to PostHog's data retention policies.
  • Authentication sessions expire automatically and are cleaned up periodically.

International Data Transfers

Your data may be transferred to and processed in the United States by our service providers (Convex, PostHog, Vercel). These transfers are safeguarded by Standard Contractual Clauses (SCCs) and the service providers' compliance frameworks. By using the Website, you acknowledge these transfers.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of your personal data.
  • Right to rectification — you can request correction of inaccurate data.
  • Right to erasure — you can request deletion of your personal data.
  • Right to restriction — you can request that we limit the processing of your data.
  • Right to data portability — you can request your data in a machine-readable format.
  • Right to object — you can object to the processing of your data based on legitimate interest.
  • Right to withdraw consent — you can withdraw your consent for analytics at any time through the cookie banner or browser settings.
  • Right to lodge a complaint — you have the right to file a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) at https://www.cpdp.bg or any other relevant supervisory authority.

Account Deletion

To request deletion of your account and all associated data, please send an email to smartpokertour@gmail.com with the subject "Account Deletion Request." We will process your request within 30 days. Upon deletion, your account data, chat messages, profile claims, and authentication sessions will be permanently removed.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

Last updated: 26.02.2026