Data controller
—, —. For any question about your data: —.
What is recorded
| Data | What it is for | How long it is kept |
|---|---|---|
| Email address | Sending you the login code and finding your account. | Until you delete your account, or 3 years after your last visit. |
| Ranking name, if you choose one | Showing you in the ranking, which everyone can see. | Until you change it or delete your account. |
| Bankroll and game history, in play money | Running the tables, the hand history and the ranking; site statistics. | Kept, without your email, name or IP address, after your account is deleted. |
| IP address of each hand and each login | Keeping the site secure and preventing abuse. | 12 months for hands, erased as soon as you delete your account; 30 days at most for logins. |
| Login code | Checking that the email address is yours. | 10 minutes, stored only as a fingerprint. |
| Code request counters (email, IP address) | Limiting how many codes are sent and tried. | 24 hours. |
| Web server logs (IP address, page asked for, date, browser) | Security and fixing faults. | 14 days. |
| Database backups | Bringing the service back after a failure. | 14 days. |
Legal bases
The service you ask for when you open an account (article 6.1.b of the GDPR) and the publisher’s legitimate interest in protecting the site from abuse (article 6.1.f of the GDPR).
Cookies and browser storage
The site sets one cookie, aucaz_sid, which keeps you logged in: 30 days at most, removed when you log out. The people who run the site have a second session cookie, aucaz_admin, valid for 12 hours. Your browser’s local storage keeps your language and your table settings (chosen chip, hints, auto play).
All of this is strictly needed for the site to work, so no consent is asked for. There are no advertising cookies, no analytics and nothing loaded from other sites. The fonts are served by the site itself.
Who receives your data
Your data is not sold, rented or passed on to anyone. Only the publisher has access to it, on its own servers (see hosting in the legal notice). Login codes go from the publisher’s mail server to your mailbox.
Your rights
You can ask to see your data, correct it, erase it, restrict its use, object to its use or get a copy of it: write to —.
You can also delete your account yourself from the tables (“Delete my account”): your email address, your name and the IP addresses of your hands are erased right away.
If you think your rights are not respected, you can complain to the CNIL, the French data protection authority (cnil.fr).
Security
The site is served over HTTPS only. There is no password to steal: login codes and session tokens are stored only as fingerprints.
Minors
The site is for adults only.
Last updated: 5 November 2026.