RankMyHand teaches poker with as little of your data as we can manage. You don't need an account. Without one we set no cookies of our own, and your answers in drills are kept under a random id, not your name. This page says what we collect, why, who helps us run the site, and what you can ask of us.
Who we are
RankMyHand (www.rankmyhand.com) is run by Sulefa OÜ, a company registered in Estonia. Sulefa OÜ decides how the data described here is used, which makes it the data controller in data protection law. For anything about your data, write to kristo.palo@gmail.com.
What we collect, and why
Your answers in drills
When you play a drill, our server deals the hands and keeps a record of the round and of each answer: the drill, the cards dealt, your pick, whether it was right and how long you took. We use it to show your result and its explanation, and to learn where players go wrong, so we can make the drills, explanations and lessons better. The record carries a random guest id, never your name, email or IP address.
A guest id in your browser
The first time you play, your browser keeps a random id in its local storage (not a cookie), so your rounds belong together. It says nothing about who you are.
Your guest id in this browser
Looking…
Forgetting it, or clearing this site's data in your browser, unlinks this browser from your past answers. To have those answers deleted as well, send us the id first (see your rights).
If you create an account
A free account keeps your rank and progress on every device. You can sign in with Google or with a link we email you. For an account we keep:
- Your email address: the one Google confirms, or the one you type for an email link. We use it to sign you in and to find your account whichever way you sign in, and for nothing else.
- How you sign in: for Google, Google's id for your account. We don't keep your name or your picture.
- Your sessions: a random sign-in key, kept by us only in a scrambled form that can't be turned back into the key, with the kind of device (website or app), when it was last used and when it ends.
- Your progress and answers: your rank, the exams you passed, and your drill rounds and answers, now under your account. When you sign in, what you played as a guest in that browser moves to your account.
To send an email link, we keep the address you typed and scrambled forms of the link and its 6-digit code until a day after they stop working, which is 15 minutes after we send them. The form first runs a check by Cloudflare Turnstile that you're a person, not a program. Our server counts sign-in emails per IP address for an hour, in its memory only, to stop anyone flooding an inbox.
Signed in, your browser keeps two cookies from us: one keeps you signed in, and can't be read by scripts on the page; the other only says that you're signed in. They're needed for the account to work, last 90 days and renew while you use the site. Signing out removes them.
Signing in with Google loads Google's button on the sign-in page. When you use it, Google tells us your email address and its id for you, under Google's privacy policy.
Your settings
Your choice of light or dark theme and of the four-colour deck stays in your browser. It's never sent to us.
Visit statistics
We count visits with Vercel Web Analytics and measure how fast pages load with Vercel Speed Insights, to see which pages help people and which are slow. Neither uses cookies. They record the page, the site you came from, your rough location (country, region and city) and your browser, system and type of device, and we only ever see totals. Vercel recognises a visit by a code worked out from the request, which it throws away after 24 hours.
What every website receives
When your browser loads a page, our hosts receive your IP address and browser details, as with any website. Our server counts requests per IP address for one minute, in its memory only, so nobody can flood it; it never stores or logs the address. Our hosts may keep short-lived logs of their own to keep their services secure.
What we don't do
We don't ask for your name or email to learn here, we don't sell data or share it for anyone's marketing, and we don't track you across other websites ourselves.
Ads
We plan to show ads from Google AdSense on some pages, marked “Advertisements” and never inside a drill or the hand analyzer. Once we do, Google and its partners may use cookies to show ads based on your visits to this and other websites. Visitors in the EU, the UK and Switzerland are asked for their consent first and can change their choice at any time.
You can turn personalised ads off in Google's My Ad Center, and opt out of many other ad companies' cookies at aboutads.info. Google explains how it uses information from sites that use its services.
Who helps us run the site
- Vercel Inc. (USA) hosts the website and runs the visit statistics.
- Render Services, Inc. (USA) runs our server and its database in Frankfurt, Germany.
- Google (Google Ireland Limited) signs you in if you choose Google, and will show the ads, once there are ads.
- Scaleway SAS (France) sends our sign-in emails, from Paris.
- Cloudflare, Inc. (USA) runs the Turnstile check on the sign-in form.
They handle data only to provide their services to us. Where data is handled outside the EU, the safeguards EU law requires apply, such as the EU's standard contractual clauses.
Why we're allowed to
- Dealing and checking the drills you play, keeping your rounds together, and your account if you create one: it's needed to give you what you asked for.
- Learning from answers, keeping the site secure (the captcha and the request limits) and counting visits: our legitimate interest in a useful, safe learning site, weighed against your interests. You can object to it.
- Ad cookies: your consent, which you can withdraw at any time.
How long we keep it
- Drill rounds and answers: two years. After that we keep only daily totals, without guest or account ids.
- Your account: until you delete it. Deleting it removes your email address, how you sign in, your sessions and your progress straight away. Your past answers stay in the statistics without your email or any id, so nobody can tell they were yours.
- Sessions: until you sign out, or after 90 days without a visit.
- Sign-in emails: the address and the scrambled link and code, until a day after they stop working.
- Visit statistics: only as totals; the code that recognises a visit is thrown away after 24 hours.
- IP addresses for the request limit: one minute, in memory.
- Your guest id and settings: in your browser, until you clear them or forget the id above.
Your rights
You can ask us for a copy of your data, and ask us to correct it, delete it, limit how we use it or stop using it, or to give it to you in a form you can take elsewhere. With an account, you can delete it yourself at any time on your account page, or write to kristo.palo@gmail.com from its email address. Without one we only know you by your guest id, so include it (copy it from the box above) when you write. We reply within a month.
You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the data protection authority where you live.
Children
RankMyHand is made for adults learning a card game, and isn't aimed at children.
Changes
When this policy changes, the date at the top changes too, and we point out bigger changes on the site. The terms of use cover the rest of how the site works.