LUCKYZAR
  1. Home
  2. Privacy

Privacy policy

We collect only the data needed to run the game and protect your account. We don't use advertising or tracking cookies.

Last updated:

Data we collect

  • Account: username, email address and a one-way hash of your password (PBKDF2). Your password is never stored in plain text.
  • Sign in with Google: if you sign in with Google we receive only your name, verified email address and Google account ID; we never get your Google password or any other data.
  • Gameplay: the hands you played, win/loss records and fairness proofs.
  • Payments: deposit and withdrawal records, your saved TRC-20 address and transaction IDs. Blockchain transactions are public by nature.
  • Contact: messages you send us and our replies.
  • Security: technical data such as IP addresses are processed for a limited time to prevent abuse.

Table chat is not stored permanently; it is deleted when the table closes.

Cookies and local storage

We use a single essential session cookie that keeps you signed in and is closed to page scripts (HttpOnly). Preferences such as language, sound and age confirmation are kept in your device's local storage. We don't use analytics, advertising or third-party tracking cookies.

Who we share data with

We don't sell your data. To run the service we use only these infrastructure providers: Cloudflare (hosting and security), Google (optional sign-in), Turso (database), Resend (transactional email) and TronGrid (TRON blockchain queries). We may share data with authorities when legally required.

Retention and your rights

Your data is kept while your account is open; financial records may be kept longer to meet legal obligations. To access or correct your data, or to ask for your account to be deleted, write to support@luckyzar.com.