Privacy policy

Card Counting Trainer (velua.xyz) is a free practice tool. You can use the whole trainer without an account, and then nothing about you leaves your browser except what any website receives. An account is only needed for ranked 1v1 matches.

Last updated: 12 November 2026.

Who is responsible

The site is run by an individual developer. For any question about your data, or to use the rights listed below, write to velua285@gmail.com.

Without an account

Settings, session history and best scores are saved in your browser’s local storage (keys starting with cct.). They are never sent to us. Clearing your browser data deletes them.
No advertising, no tracking cookies, no analytics scripts.
Hosting: the site is served by Cloudflare, which processes your IP address and standard request data (browser, page requested) to deliver and protect the site. We only see aggregated visit counts.
Font: the monospace font (JetBrains Mono) is loaded from Google Fonts, so Google receives your IP address when the page loads.

With an account (optional)

Accounts are handled by Supabase (authentication and database, servers in the EU, Stockholm). When you create one we store:

Sign-in details: your email address and a password stored only as a secure hash. If you sign in with Google or GitHub, we receive from them your email address, display name and profile picture link. We never see your Google or GitHub password.
Your player name, and the date it was last changed (names can be changed once every 30 days).
Ranked 1v1 data: each match (opponent, rounds, the answers you typed and when the server received them, result), your Elo rating and your win/loss record. Answers and timings are kept so that the server can check every match for cheating.
Friend challenge links you create, until they are used or cancelled (and at most a few hours).

What other players see: your player name, Elo rating and win/loss/draw record on the public ladder; your opponent sees your name, rating and per-round results during and after a match. Your email address is never shown to anyone.

Why we use it

Only to run the service you asked for: signing you in, pairing players, refereeing matches, keeping ratings and preventing cheating. We do not sell or share your data, and do not use it for advertising.

Service providers

Supabase: accounts, database and server functions (EU region).
Cloudflare: hosting and network.
Google and GitHub: only if you choose to sign in with them; their own privacy policies apply.
Google Fonts: web font delivery.

How long we keep it

Account data is kept as long as your account exists. To delete your account, email us from the address linked to it: your account, player name, ratings and matches are deleted within 30 days. Data in your browser stays until you clear it.

Your rights

If you are in the EU/EEA or the UK, you can ask to access, correct, export or delete your data, or object to its use, by writing to the address above. You can also complain to your national data protection authority.

Children

The site is not directed at children under 16, and accounts should not be created by anyone under 16.

Changes

If this policy changes, the new version will be posted on this page with a new date.