Privacy policy

Solving happens on your device

Strategy solving runs in your own browser or phone (WebAssembly / native engine). The boards, ranges and solutions you study never leave the device and are not uploaded to us.

Training stats, the mistake book and custom drills are stored in local browser storage only. You can inspect, export or delete all of it in Settings → Data & privacy.

Account data we store

Account: email address, a password hash (never the password itself), whether the address is verified, and the signup date. If you sign in with Google or Apple we also store that provider’s user identifier so you resolve to the same account next time.

Hands you choose to save: only when you press “Save hand” or turn on automatic upload do the hand history and its per-decision EV losses reach us. They are what the leak report is built from.

Usage counters: monthly counts of cloud saves and AI coach calls, used to enforce plan limits.

Subscription: Stripe customer and subscription identifiers. We never see or store your card details.

Third parties

Stripe — payments and subscription management.

Google Analytics — traffic and feature-usage measurement, only after you accept (see “Cookies and analytics” below).

Anthropic (Claude) — the AI coach. It receives the board, your hand, the available actions and their EVs; it does not receive your email or account identifier.

Resend — verification and password-reset email.

Google / Apple — authentication, if you choose to sign in with them.

RevenueCat — subscription status for mobile in-app purchases.

Beyond these processors we do not sell, rent, or share your data for advertising.

Retention and deletion

Account data is kept while the account exists. In Settings → Data & privacy you can delete every saved hand, or delete the account itself — which also removes saved hands, usage counters and entitlements, and cancels any active subscription. Neither can be undone.

Local data is entirely yours: clear it from the settings screen, or by clearing site data in your browser.

Cookies and analytics

Analytics is off until you say otherwise. On a first visit, Google Consent Mode v2 sets every category to denied, and no analytics cookie is written. Google Analytics (GA4) only starts once you accept on the banner.

After that it sets first-party cookies (_ga, _ga_*) and records the page path, referrer, approximate location and device type. What Analytics receives never includes your email, an account identifier, or any hand data — solving and training happen on your device to begin with.

No advertising, no cross-site ad tracking, and nothing fed into advertising audiences.

You can change your mind at any time. On the site, “Cookie settings” in the footer reopens the banner; in the app, Settings → Data & privacy → Anonymous usage analytics. Choosing essential-only, or switching it back off, also deletes the _ga cookies already written.

With Do Not Track enabled in your browser, neither the site nor the app loads the analytics script, and neither shows you the banner.

The site (vipergto.com) and the app (app.vipergto.com) use two separate GA4 properties on two separate domains, so a choice made on one does not carry to the other.

Your session token lives in localStorage, not in a cookie.

Contact

For any question or request about your data, write to hi@vipergto.com.