Privacy Policy

1. About this policy

Riverroom (“we”, “us”) is a tool for organising poker tournaments and cash games. This policy explains what information the service collects and what happens to it when you sign in, create a game, or open a shared game link.

For privacy questions, requests, or concerns, contact tinytigerbcm@gmail.com.

2. Information we collect

• Google account information: when you choose Sign in with Google, we receive your Google account identifier, name, email address, email verification status and, when supplied, profile picture. We also store authentication tokens and sign-in records needed for account access.
• Player profiles and relationships: your unique username, friendly name, Google profile picture, friend requests, accepted friendships, game invitations and your responses. Completed game results and hosting records are retained for statistics. Only accepted game invitations add a result to a player account; adding yourself gives that consent for your own entry.
• Game and player information: game names, dates, locations or table links, settings, player names, saved-player lists, chip counts, buy-ins, rebuys, cash-outs, prizes, rankings, settlement confirmations and game history that you enter.
• Session and security information: session identifiers, sign-in and expiry times, IP addresses, browser information, temporary OAuth verification records and request-rate records.
• Usage and performance information: pages visited, referring pages, approximate location, device and browser details, and page-loading measurements collected through Vercel Web Analytics and Speed Insights.
• Messages you send us: your contact details and the information you include when asking for support or making a privacy request.

Riverroom does not ask for your Google password. Its Google sign-in requests only basic identity, email and profile permissions; it does not request access to Gmail, Drive, Contacts or Calendar.

3. How we use information

We use this information to sign you in, recognise your account, save and reopen your games and player lists, show live game updates and results, produce settlement instructions, respond to requests, protect the service from abuse, and understand its usage and performance.

We use Google account information for authentication, account management, and the profile name and picture shown in account and friend features. We do not sell Google user data or use it for advertising. Our handling of that information follows the Google API Services User Data Policy, including its Limited Use requirements.

4. Shared games and other players

Game links are public. Anyone with a tournament or cash-game link can view its game details, entered location or table link, player names, chip and money values, results and history. A link can be forwarded, and public pages may be indexed by search engines. It is not a private invitation or an access restriction.

Google account email addresses, provider tokens and account identifiers are not included in the public game information. Your saved-player library is available to your signed-in account; adding a player to a game makes their game entry visible through that game’s public link.

Only enter information you are authorised to share. Tell players how their names and game information will appear, and avoid adding private contact details or sensitive information to public fields. Deleting a game cannot remove copies that other people have already made.

Profiles, friendships and statistics

Signed-in users can find your friendly name, username and Google profile picture by searching your exact username. A friendship becomes mutual when the recipient accepts. Your statistics are visible to you and accepted friends; your friends? relationships and hosting records are not shared through your profile. Friends awards use games played together where both players accepted.

A host can add a friend to a game before the invitation is accepted. Their game entry is visible on the public game link, including the name and username shown in that entry. Account statistics are recorded only after the player accepts, including if they accept after completion. Declining leaves the public game record in place but does not add that game to their account statistics.

Deleting a public game does not delete its completed statistics or hosting record. Completed results are retained to preserve participants? histories and allow outstanding invitations to be accepted later. Removing a friend ends future invitations and access to each other?s statistics; it does not erase previous accepted results. Contact us for account or personal-information removal.

5. Service providers and disclosures

Riverroom uses Google for sign-in, Vercel for website hosting, operational logs, analytics and performance monitoring, and Turso for database storage. These providers process information needed to provide their services, and may process it outside your country.

We may also disclose information when required by law or when necessary to investigate abuse, protect the service or its users, or respond to a legitimate security incident. Access by the site operator is limited to operating the service, support, security and handling requests.

See the providers’ policies: Google Privacy Policy, Vercel Privacy Notice, and Turso Privacy Policy.

6. Cookies and browser storage

Riverroom uses cookies to keep you signed in and to protect the Google sign-in flow. Login sessions are configured to expire after 30 days and may be renewed when you use the service. Signing out revokes the current session; it does not delete your account or games.

Your light or dark theme preference is saved in your browser. Blocking or clearing cookies can prevent sign-in or sign you out. Vercel Web Analytics uses request-derived visitor identifiers rather than analytics cookies; its usage and performance reports include page URLs and technical measurements. Details are available in Vercel’s Web Analytics privacy documentation and Speed Insights privacy documentation.

7. Storage, security and retention

Account records, saved players, games and authentication records are stored in our database. Production connections use HTTPS, sign-in sessions are checked on the server, and stored Google access and refresh tokens are encrypted. These safeguards reduce risk; no internet service can promise complete security.

Saved games and player lists remain available until you delete them or request their removal. Deleting a saved player removes that library entry, but does not erase the player’s entries in existing games. Authentication records, operational logs and backups may remain after a session expires or data is deleted, for security, troubleshooting, backup recovery or legal requirements; backup copies are removed through the relevant provider’s retention cycle.

8. Your choices and requests

You can update your game data, remove saved players, and delete games through My Games. You can revoke Riverroom’s Google access in your Google Account connections. Revoking access does not by itself delete information already saved in Riverroom.

To request access to, correction of, or deletion of your account or personal information, email tinytigerbcm@gmail.com. Include the email you use to sign in and, for player information, the relevant game link. We may ask you to verify ownership before acting. Do not send passwords or authentication tokens. We will explain if a legal obligation prevents removal of particular records.

9. Adults and policy updates

Riverroom is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can investigate and address it.

We may update this policy as the service changes. The current version and its last-updated date will remain on this page. Our Terms of Service explain the conditions for using Riverroom.