Privacy
2026-08-20
Poker Exploit is built so that this document can be short. The desktop application does not talk to our servers about your poker, so most of what a privacy notice usually has to explain simply does not happen here.
What never leaves your machine
Your hand histories, the hands themselves, the players you sat with, your results and every statistic derived from them stay on your computer, in a database file you own. They are never uploaded, never pooled with other people's, and never seen by us. There is no setting that changes this, because there is no code that would do it.
This is not only a promise about our intentions. It is what the poker rooms' own terms require of a tool like this one, and breaking it would put your account at risk rather than ours.
What our servers do hold
The website's database contains three things, and this is the whole of it. Waiting list: your email address, the language the page was in, where you arrived from, and the date. Licences: your email address, the name a key was issued to, which plan, the key itself, and when it expires. Invitations: the code, and the address that claimed it.
No hand, no player name, no result and no statistic is in that database. The desktop application never connects to it.
Your licence key is checked on your machine
The key carries its own signature and is verified locally. The software does not phone home to ask whether you may run it, which means it works with no connection at all — and means we do not learn when you play.
Problem reports
The application can copy a diagnostic report: version numbers, how many hands are stored, the size and path of your database, your language and platform. You paste it into a message and send it yourself. Nothing is transmitted automatically, and the report contains no hand, no player and no result.
Cookies
Two, both strictly necessary and neither used to follow you: one that remembers you passed the download gate, and one that remembers you claimed an invitation. There is no analytics, no advertising pixel and no third-party tracker on this site.
Who processes what, on our behalf
The site runs on Vercel. Its database runs on Neon. Installers are stored on Cloudflare R2. Email is sent through Resend. Payment, when the paid version opens, is handled by Paddle, who are the merchant of record — we never see your card details.
How long we keep it, and how to leave
Waiting list addresses are kept until you unsubscribe, and every message carries a one-click link. Licence records are kept while the licence is valid and for as long afterwards as we may need to answer a question about it. Write to us and we will delete what we hold about you, or tell you what that is.
Changes
If this notice changes in a way that affects what we hold or who processes it, the date above changes and anybody on the list is told.