Privacy

Effective 2026-05-14 (version 2026-05-14)

What we collect

When you become a member we collect your name, date of birth, email address, and phone number. We also collect an ID document image to verify your age and identity; that image is deleted 30 days after verification is complete. When you use the site we collect session data, page views, and any JavaScript errors that occur in your browser.

When you make payments we record the Stripe customer ID and payment-intent IDs associated with your account, and we keep a ledger of your transactions with the club.

How we use it

We use your information to operate the club: to verify your identity, manage your membership, process buy-ins and cashouts, and send you messages about your account. We use session and error data to keep the site running correctly. We use analytics to understand how the site is used so we can improve it.

We do not sell your personal information to third parties.

Who sees it

Club staff (cashiers and managers) can see your name, email, and role so they can assist you at the table. Only managers and above can see soft-deleted or anonymized account records for compliance purposes. We share data with our service providers — Supabase (database and authentication), Stripe (payments), Sentry (error tracking), and PostHog (analytics) — only as necessary to operate the club.

How long we keep it

Different types of data have different retention schedules:

• ID document image: Deleted 30 days after your identity is verified.
• Audit log: Kept forever for compliance and dispute resolution.
• Financial records (ledger and payments): Retained for at least 7 years per IRS and tax requirements. Requesting deletion of your account does not remove your financial history. This is a legal exception under CCPA and applicable tax law.
• Error tracking (Sentry): 90 days.
• Analytics (PostHog): 1 year.
• Sessions: 30 days for security forensics.
• Marketing contacts: Until you unsubscribe.

Your rights

You have the right to access, correct, and delete your personal information. You can exercise these rights from the Privacy & data section of your profile:

• Download my data: Get a JSON export of your profile and audit history.
• Delete my account: Anonymizes your name, email, and phone number and signs you out. Financial and audit records are retained as described above. This action cannot be undone.
• Correct your information: You can edit your profile fields directly. For changes to immutable fields (date of birth, member number), contact a manager.
• Opt out of data sale: We do not sell your personal data. The opt-out toggle is present as required by CCPA but has no operational effect.

To exercise rights that are not available self-serve, email us at the address in the Contact section below.

Cookies & tracking

We use cookies to keep you signed in (essential) and, with your consent, to collect analytics data and error reports. You can manage your cookie preferences from the cookie banner that appears when you first visit the site, or by clearing your browser cookies at any time. For full details see our cookie policy section.

Children

This site is for adults only. We do not knowingly collect personal information from anyone under the age of 21. If you believe a minor has provided us with personal information, contact us and we will delete it promptly.

Changes to this policy

We will update this page when our data practices change. The effective date at the top of the page tells you when the current version took effect. Material changes will be communicated to members by email before they take effect.

Contact us

Questions about this privacy policy or your personal data? Contact the club through the member portal or by emailing the address on file for your membership. We aim to respond within 30 days.