1. Controller
The controller responsible for data processing under the GDPR is the operator named in the imprint. Contact: support@corespade.app.
2. What I collect, and why
Account data: your email address when you ask for access. Legal basis: performance of a contract, Art. 6(1)(b) GDPR. No payment data is processed at present. There is no checkout and no way to be charged during the alpha and beta.
Licence data: to verify that a licence is valid, CoreSpade transmits your email address and a hardware identifier derived from your computer. The identifier exists so a licence cannot be used on an unlimited number of machines. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
3. Who receives data
The following services receive data when you use CoreSpade or this website:
- Google (Apps Script): currently hosts the licence check. Receives your email address, the hardware identifier and your IP address. Processing takes place on servers that may be located outside the EU. This is a temporary arrangement for the alpha phase and will be replaced by a merchant of record before general release.
- A payment provider, not yet in use. Once CoreSpade becomes chargeable, payments will run through a merchant of record. This policy will name that provider before any payment is possible.
- Discord: only if you enable Rich Presence. Discord then receives the information that CoreSpade is running.
- Spotify: only if you use the final table song feature. The request transmits your IP address to Spotify.
- News sources (poker.org, cardplayer.com, pokerfirma.com, hochgepokert.com): only for the news feeds you switch on. Each request transmits your IP address to that provider. The same applies to any RSS feed you add yourself: CoreSpade then contacts that address, and you choose it, not I.
I do not sell, rent or share your personal data for marketing purposes.
4. What stays on your computer
CoreSpade does create images: the screenshot assistant when you press its hotkey, and diagnostic captures of table states used to investigate detection errors. None of these leave your machine. They are written to the program folder and you can delete them at any time. There is no automatic upload of screenshots, hand histories or table contents.
CoreSpade does not read your browsing history, does not record your hands and does not observe anything outside the poker table windows you have open.
5. Retention
Account and licence data are kept for as long as your licence exists and afterwards only where a statutory retention period requires it. Locally stored logs and captures remain on your computer until you delete them.
6. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. To exercise any of these, write to support@corespade.app. You also have the right to lodge a complaint with a supervisory authority.
7. Data security
Communication with the licence server is encrypted in transit. I apply reasonable technical measures to protect personal data against unauthorised access, alteration or disclosure.
8. Contact
Questions about this policy: support@corespade.app or via the Discord server.