Privacy Policy
This policy explains what PlayerEdge collects, why, who sees it, how long we keep it and how to get it deleted. "We" and "us" means QuantMax, which runs PlayerEdge. Questions or requests: [email protected].
The short version
- You can learn without an account. Your progress then stays in your browser or on your phone.
- With an account we keep what we need to run it: your email, username, progress, game data and items. We never see your card details, and we store only a scrambled form of any password.
- We don't sell your data and don't use it for marketing. Google shows ads to players without Pro, under its own policy and your consent choices.
- You can delete your account, and its data, at any time from Profile.
Who we are
PlayerEdge is a poker learning app for adults, made by QuantMax in Australia. We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles. If you are in the United Kingdom or the European Economic Area, we are also the "controller" of your personal data under the UK GDPR and the GDPR, and you have the rights described below.
Using PlayerEdge without an account
You can use PlayerEdge without signing in. Your lessons, progress, mistakes, practice hands, Edge-Cash and items are then kept only in your browser's storage (on the web) or in the app (on iPhone), and are not sent to our server. Nearby play on iPhone talks directly to other phones on your local network. Ads are still shown to players without Pro (see Advertising).
What we collect with an account
Signing in creates a PlayerEdge account so your progress follows you between devices and you can play online, add friends and trade. You can sign in with Google, with your email and a password, with a one-time link we email you, or with Apple on iPhone. We then store:
- Account and sign-in: your PlayerEdge user id and friend code; the identifier Google or Apple gives us for you (never your Google or Apple password); your email address; and, if you set one, a password stored only as a salted, one-way hash, so nobody (including us) can read it. To protect your account we record when each sign-in session started and how it was opened (Google, Apple, password or email link), and briefly count failed password attempts for an email address, whether or not it has an account.
- Username: the name other players see. New accounts get a random one such as "Player 4821"; we never show the name Google or Apple shares with us.
- Learning data: XP, lesson and rank progress, skill mastery, streaks, your mistakes and answers, your onboarding answers and your time zone.
- Game data: your Edge-Cash balance and its ledger, your cosmetic items and what you wear, friends, trade offers and their messages, and the hands you play at online tables (actions, results and coaching grades).
- Invites: if you joined with a friend's invite link, that you did, so they get their reward, kept with a one-way scrambled form of your email address that only tells us whether the same inbox has joined before. If you invite friends, how many joined.
- Safety: players you block, and reports you make or that are made about you, with what was on screen at the time.
- Pro subscription: if you subscribe, Paddle's reference numbers for you and your subscription, the plan, its status and its dates. Your card and payment details go to Paddle, never to us.
- Rewarded ads (iPhone): for each rewarded ad you finish, the reward, the ad unit, the time and Google's reference, so the reward can be checked.
- Messages to us: what you send when you email support.
We collect this from you and your device as you use PlayerEdge, and from Google or Apple when you sign in with them. Our server also handles your IP address to deliver the service and limit abuse; it is not stored with your account.
Advertising
PlayerEdge is free because it shows ads to players without Pro. On the web, ads come from Google AdSense; on iPhone, from Google AdMob. Pro shows no ads, and on the web the ad code is not loaded at all for Pro. When an ad is shown, Google may collect:
- Identifiers: cookies and similar identifiers in your browser, or an identifier for your device and app. On iPhone, Google gets the advertising identifier (IDFA) only if you allow tracking.
- Network and location: your IP address and the rough location it implies, such as your country or city.
- Ad activity: which ads were shown, whether you watched or tapped them, and when; and technical data about how they loaded.
Google uses this to show and measure ads, limit how often you see the same one and stop fraud, and to personalise ads only where you have agreed. Players in the UK, the EEA and Switzerland see Google's consent message before any ad, and can change their choice at any time in Profile, then Privacy & ad choices. On iPhone you can refuse tracking in Settings, then Privacy & Security, then Tracking. Refusing still shows ads, just not personalised ones. See how Google uses information from sites and apps that use its services.
Rewarded ads are always optional. On the web their reward is granted in your browser, and no PlayerEdge user id is passed to Google. On iPhone, Google tells our server when you finish one so the reward can be checked, with your PlayerEdge user id if you are signed in. We never give Google your name, email address, learning data or game data.
Payments
PlayerEdge Pro is sold by our reseller Paddle.com, the merchant of record. Paddle collects your payment and billing details, handles tax, receipts and refunds, and uses them under its own privacy policy. We tell Paddle only your PlayerEdge user id, so the subscription reaches the right account, and Paddle tells us the subscription's status. In live checkout Paddle also uses ProfitWell, its own service, to measure and reduce cancellations.
How and why we use it
- To provide PlayerEdge: your account, syncing progress, online tables, friends, trades, gifts and Pro. (Under the UK GDPR / GDPR: performing our contract with you.)
- To keep it fair and safe: stopping cheating, fraud, abuse and account takeover, handling reports, and enforcing our terms. (Legitimate interests.)
- To improve it: counting visits with Cloudflare Web Analytics, which uses no cookies and does not identify you, and fixing errors. (Legitimate interests.)
- Personalised ads: only with your consent where the law requires it. (Consent.)
- To meet legal obligations, such as tax records kept by Paddle or responding to lawful requests. (Legal obligation.)
We do not sell personal information, use it for marketing, or make decisions about you by automated means that have legal or similarly significant effects. We email you only about your account: sign-in links, security notices such as a password change, and replies to your messages.
Overseas storage and transfers
Our servers and service providers are outside Australia, mainly in the United States, and also in the United Kingdom, the European Union and other countries where Cloudflare, Google and Paddle operate. We choose providers that protect personal information to a standard comparable with the Australian Privacy Principles and, for UK and EEA players, rely on the safeguards the UK GDPR and GDPR require, such as standard contractual clauses.
How long we keep it
| Information | Kept |
|---|---|
| Account, learning, game and Pro data | Until you delete your account |
| Emailed sign-in links | Only a fingerprint, deleted about a day after the link expires (links work once, for 15 minutes) |
| Sign-in sessions | Each lasts up to 30 days; records of past sessions stay with your account |
| Failed password attempts | Up to a day after the last attempt, to slow down guessing; cleared when you sign in |
| Reports and moderation decisions | Kept after an account is deleted, with the username shown at the time, where needed to keep players safe |
| Invite records | Kept after deletion, with only the scrambled email fingerprint, so one inbox can't claim invite rewards again |
| Backups | Overwritten on a rolling basis |
| Payment records held by Paddle | As Paddle's own policy and tax law require |
Deleting your account
In PlayerEdge, go to Profile, then Delete account. This removes your account and the data listed above from our live database straight away (apart from the records the table above says we keep), cancels a Pro subscription, cancels open trade offers, revokes Sign in with Apple and clears PlayerEdge's data from that browser or phone. In other players' past hand histories your name becomes "Former player". You can also ask by emailing [email protected] from your account's email address. Data Google holds for ads is managed under Google's policy.
Your rights and complaints
You can ask to access the personal information we hold about you, and to correct it. You can also change your username, password and ad choices yourself, and delete your account. If you are in the UK or EEA you also have the right to erase, export (portability), restrict or object to processing, and to withdraw consent at any time. Email [email protected]; we reply within 30 days and may need to confirm it's you.
If you have a complaint, please tell us first so we can put it right. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner, or, in the UK, the Information Commissioner's Office, or your local data protection authority in the EEA.
Age
PlayerEdge is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has an account, email us and we will delete it.
Security
Everything travels over encrypted connections. Passwords are stored only as salted one-way hashes; repeated wrong guesses are slowed and locked out. Sessions are signed tokens that can be revoked, including from every device at once, and changing your password signs out your other devices. Emailed sign-in links work once, expire after 15 minutes, and only their fingerprint is stored; a link opened in a different browser from the one that asked for it shows whose account it is and asks you to confirm first. You get an email whenever a password is added to or changed on your account. On the web your session is kept in your browser's storage, so keep your device locked and sign out on shared computers. If a data breach is likely to cause you serious harm, we will tell you and the regulator as the law requires.
Changes to this policy
When this policy changes, we post the new version here with a new effective date, and tell you in the app if the change is significant.