Privacy

The short version

• FlopMAX keeps your email and a username you pick, and what you do in the games, so it can show you your results. It never asks for your real name.
• No ads, no tracking across other sites, no selling or renting your data.
• You can download everything or delete your account at any time, from the account page.

Who we are

FlopMAX, based in Jacksonville, Florida, USA, decides how the information below is used. The site and its data are hosted on a server in the United States.

What is kept

From Google, when you sign in

The ID and email address of each Google account you sign in with (you can link more than one to your account). That's all: FlopMAX doesn't ask Google for your name, photo or anything else, and keeps no password or Google access token. The emails are refreshed each time you sign in, and one of them is your main email.

What you set

The username you choose, your game settings (table sizes, rules, table minimums and the like) and the ranges you paint and save.

What you do

• NLHE Cash: each graded preflop decision: the table size, your seat, the spot, your hand, what you did and its grade.
• Blackjack: each finished hand (the rules, the bet, the result) and each decision in it against the chart.
• Roulette and craps: each spin or roll, and the bets it settled.
• Usage: how many decisions and strategy spots you used each day, and which Library pieces you opened on which day.
• Account dates: when you joined and last signed in.

What the server logs

Like most websites, the server records requests (your IP address, the time, the page asked for and your browser's description) to keep the site secure and working. These logs aren't used to build a profile of you, and they're deleted after 14 days. The app itself counts requests by page and hour, without IP addresses or accounts, and when something breaks it records the error, the page and the account it happened to, so we can fix it. Those error records are deleted within 30 days.

Why it is kept

• To sign you in and keep you signed in.
• To show you your own Results, streaks and saved ranges.
• To keep the site safe from abuse and automated sign-ups.
• To understand, in total, how the site is used, so it can be improved.

Your records are yours to see. The site's operator can see account records in order to run and support the site, and doesn't share them except as below.

Cookies and storage in your browser

• Sign-in cookies. A session cookie keeps you signed in and holds a little state, like the hand at your table. A "remember me" cookie keeps you signed in for up to 30 days. Both are needed for the site to work, and Sign out everywhere else, on the account page, ends them on every other device.
• A time zone cookie holds your device's time zone (such as America/New_York), so "today" in your Results is your day.
• Your browser's storage. Preferences such as light or dark mode and table colors are kept in your browser, along with a hand in progress so it survives a page change. They stay on your device.
• No advertising or analytics cookies.

Other services

• Google signs you in (see Google's privacy policy) and serves the site's fonts, so your browser asks Google for them.
• Cloudflare Turnstile runs a quick check before sign-in and before your first hand, to keep bots out. Cloudflare receives information about your browser to do this (see Cloudflare's privacy policy).
• YouTube videos in the Library load only when you press play, from YouTube's privacy-enhanced player. Until then YouTube receives nothing.

FlopMAX doesn't sell, rent or trade personal information, and shares it only when the law requires it.

How long it is kept

For as long as you have an account. Clearing a game's history deletes those records at once; deleting your account deletes everything kept about you at once. Request logs are deleted after 14 days, and the app's error logs within 30.

Your choices and rights

• See and download everything kept about you: account page, Download your data.
• Change your username on the account page. Your email comes from Google.
• Delete one game's history, or your whole account, on the account page.
• Remove a linked Google account on the account page.
• Withdraw access from your Google account's connected apps page.

Depending on where you live, you may have further rights over your data, such as to object to how it is used or to complain to a data protection authority. For anything the account page doesn't cover, write to support@flopmax.com.

Security

The site runs only over encrypted connections (HTTPS), the sign-in cookies are signed and sent only over HTTPS, and every change you make carries a check against forged requests. No system is perfectly secure, but FlopMAX keeps as little as it can.

Children

FlopMAX is for adults, and isn't meant for anyone under 18.

Changes

When this page changes in substance, the date at the top changes too. A big change will also be noted on the site.