Privacy Policy

Effective date: October 15, 2026 · Last updated: October 15, 2026

Dominate Blackjack (the “Service”) is a free, educational blackjack practice app available at www.dominateblackjack.com. The Service is operated by Andy Chen, an individual based in California, United States (“we”, “us”, “our”). This policy explains what information we collect, why, and what you can do about it.

In short: we collect the email address you sign up with and the gameplay stats needed to show your progress. We don’t sell your data, we don’t run ads, and there are no casino or affiliate links. You can delete your account at any time by emailing us.

1. Information we collect

Information you give us

Account details. Your email address, a display username, and an avatar emoji. Your password is handled by our authentication provider and stored only in a hashed form — we never see or store your plain password.
Signing in with Google. If you choose “Continue with Google”, Google shares your email address and basic profile information (such as your name and profile picture) with us. We use this to create your account. We never receive your Google password.

Information created as you use the Service

Gameplay data. Your virtual bankroll, bets, hands played, decision accuracy, win/loss/push counts, streaks, and your game settings. This is what lets the app show your progress.
Guest mode. If you play without an account, your stats and settings are stored only in your own browser (local storage) and are not sent to us.

Information collected automatically

Technical data. When your browser requests a page, our hosting and CDN providers automatically process your IP address, browser type and user agent, and the time of the request. This is used to serve the app, keep it secure, and prevent abuse.

2. Cookies and local storage

We use a small amount of browser storage and no advertising cookies. See our Cookie Policy for the full list of what is stored and why.

3. How we use your information

To create and secure your account, and to verify your email address.
To save and display your gameplay progress and settings.
To let you sign in with Google if you choose to.
To keep the Service working, secure, and free of spam and abuse.
To understand, in aggregate, how the Service is used so we can improve it.
To respond to you when you contact us.

4. Legal bases (EEA/UK visitors)

Where the GDPR applies, we rely on the following legal bases:

Performance of a contract — to provide the Service you signed up for.
Legitimate interests — to keep the Service secure and prevent abuse.
Consent — where we ask for it (for example, optional analytics).

5. Who we share information with

We do not sell your personal information. We share it only with the service providers that run the app, and only as needed:

Provider	Purpose
Supabase	Database and authentication — stores your account and gameplay data
Vercel	Hosting and cookieless, aggregate analytics
Cloudflare	CDN, DNS, and bot/abuse protection
Google	Sign-in with Google, if you choose it

We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the Service.

6. How long we keep it

We keep your account and gameplay data for as long as your account exists. If you delete your account, we delete your personal data, with the exception of anything we are required to keep for legal or security reasons, or that remains in routine backups for a short period.

7. Your rights and choices

Depending on where you live, you may have the right to:

access a copy of the personal information we hold about you;
correct information that is inaccurate;
delete your account and personal information;
receive your information in a portable format;
object to or restrict certain processing.

California residents (CCPA/CPRA) have the right to know, delete, and correct their personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined by California law.

To exercise any of these rights, email [email protected]. We may need to verify your identity before acting on a request.

8. Children

The Service is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us and we will delete it. The Service is also not intended for anyone under 18 (see our Terms of Service).

9. International transfers

Our providers may process your information in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

10. Security

We use industry-standard measures to protect your information, including encryption in transit and access controls on our database. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.

12. Contact

Questions about this policy? Email [email protected].