Privacy policy
Last updated 2026-09-14
Nutstack is a play-money poker site for private games among friends. This page says what it collects, why, and what you can do about it. It is written to be read, not to be skimmed past.
What we collect
Your account
Signing in is handled by Auth0, an identity service. When you sign in, Nutstack receives the profile your identity provider shares: an account identifier, your name, your email address, and a profile picture if one is set. We use the identifier to tie a seat at a table to you, and we show your name and chosen avatar to the other people at your table. We do not use your email address to send you anything.
Your games
Every hand played at a table is recorded: who was seated, the actions taken, the cards shown at showdown, and how the pot was paid. Alongside it, each table keeps a ledger of buy-ins and cash-outs. Both are stored by the room's id, and anyone signed in who knows that id can look them up on the Game history page — the id is the only thing that protects a room, so treat a room link like an invitation. Chat messages are relayed live to the table and are not stored.
We also keep a short list of the most recent rooms you have joined, so the lobby can offer them back to you. It holds at most ten entries and rolls over on its own.
How the site is used
We use PostHog for product analytics: which pages are viewed, when a game is created or joined, and where people drop out along the way. Events are tied to your account identifier so a visit and the game it led to can be counted as one journey. The analytics client runs with in-memory persistence, which means it sets no cookies and stores nothing in your browser. Without it we cannot tell what is working.
Server logs
Like any web service, our servers log requests, including IP addresses and browser details, for operating and securing the site. These logs are kept by our hosting provider for a limited period and are not joined to your gameplay data.
Cookies
Nutstack sets one cookie: the Auth0 session cookie that keeps you signed in. It is strictly necessary for the site to work and is not used for tracking or advertising. There are no analytics or third-party advertising cookies.
Who else sees your data
We do not sell personal data, and we do not share it for advertising. Three services process it on our behalf:
- Auth0 (Okta) runs sign-in and holds your login credentials; we never see your password.
- Google Cloud hosts the site and stores hand histories and ledgers, in the United States.
- PostHog receives the analytics events described above.
How long we keep it
Hand histories and ledgers are kept so that a group can settle up long after a game ends; there is no automatic deletion. Your recent-rooms list is capped at ten entries. Analytics events are retained under PostHog's standard retention. Your account exists at Auth0 for as long as you keep it.
Your choices
Email hello@nutstack.club from the address on your account to ask what we hold about you, to have your account and recent-rooms list deleted, or to have your name removed from stored hand histories. We will answer within 30 days. Because a hand history is a shared record of a game other people also played, we anonymise your entries rather than delete the hands.
Age
Nutstack is for adults. Do not use it if you are under 18, or under the age of majority where you live, and we will delete any account we learn belongs to someone who is.
Changes
If this policy changes in a way that matters, the date at the top will move and the change will be described here. Continued use after a change means you accept it.