Legal
Privacy Policy
Last updated August 25, 2026
ColeG Poker is run by Cole Griffith, trading as ColeG Poker. This explains what is collected, who else touches it, and how to get a copy or have it deleted.
The short version
- There is no tracking. No analytics, no advertising pixels, and nothing from anybody else loading when you arrive. The one exception is the walkthrough video: press play and YouTube loads. Otherwise nobody is told that you visited.
- Your data is not sold, shared or used to train anything.
- Card numbers never reach this site. Stripe handles them.
- One cookie, and it is the one that keeps you logged in.
What is collected
Your account. Your email address, and a password stored only as a hash — the actual password is never held and cannot be recovered, only reset.
What you put into the tools. Tournament results, site balances and transfers, notes on opponents, study notes and any screenshots you upload, ranges you paint, and session plans. All of it is entered by you.
Your subscription. Which plan you hold, its status and its renewal date, plus an identifier linking you to your Stripe customer record. Not your card details.
Ordinary server logs. The hosting provider records requests — including IP address — for a short period, to diagnose faults and absorb abuse. These are not used to build a profile of you.
What is not collected
No name, no address, no phone number, no date of birth. None of it is asked for and none is needed. Billing details you give Stripe stay with Stripe.
Cookies and local storage
One cookie is set: the session that keeps you logged in. Delete it and you are logged out. There is no consent banner because there is nothing else to consent to.
The site also uses your browser's local storage for preferences — light or dark theme, which range you were last looking at, the width of a pane, which seats you assigned at a table, whether an alert sound is on. This never leaves your device and is not readable by the server.
Who else processes it
These are the only third parties involved, and what each one does:
- Supabase. Stores your account and everything you enter into the tools, including uploaded screenshots. Hosted in the United States.
- Vercel. Hosts and serves the site, and keeps short-lived request logs for diagnosing faults.
- Stripe. Takes payments and stores your card details. Card numbers never reach this site or its database.
- Resend. Delivers account email — password resets and address confirmations.
- YouTube (Google). Hosts the walkthrough video. The player only loads if you click play — until then the page requests the still image and nothing else, and sets no cookies. Pressing play connects you to Google, who may then set cookies and record the view under their own privacy policy.
Every one of them is in the United States, so that is where the data lives. If you are outside the US, using the site means your data is transferred there.
How long it is kept
Until you ask for it to go. Cancelling a subscription locks the tools but deletes nothing — what you have entered stays, so that resubscribing later finds your history intact. Locking somebody out of their own records is not something a paywall should do.
Ask for deletion and the account and everything in it is removed, including uploaded files. Stripe keeps payment records for as long as its own legal obligations require, which is outside our control.
Your rights
Write to support@colegpoker.com for any of:
- a copy of everything held about you
- a correction
- deletion of your account and its contents
- an explanation of anything on this page
Requests are answered within 30 days. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA; those are honoured regardless of where you are.
Security
- Everything travels over HTTPS.
- Passwords are hashed, never stored as text.
- Every table carries a row-level security policy so one account cannot read another's rows, and uploaded files are kept in a private store reached only through short-lived links.
- Card details are never received, so they cannot be leaked from here.
No system is perfectly secure. If a breach affects your data you will be told promptly and plainly.
Children
Not intended for anyone under 18, and accounts are not knowingly created for them. Write in if you believe one has been and it will be removed.
Changes
If this policy changes materially — a new processor, a new category of data — the date at the top changes and account holders are emailed.