Privacy notice

Last updated: 4 October 2026

The short version. We collect as little as we can to run a fair, safe game. We don't ask for your real name, email address or phone number to play, we don't run ads, and we never sell your data.

1. Who's responsible

MYWoRLD / The Estate is the data controller for Estate Hold'em at play.everystreethasastory.uk. Contact: mindmoves3@gmail.com.

2. What we collect

Data	Why
Your display name, @handle, avatar and friend code	To show you at tables, in leagues, clubs and friends lists
A random sign-in token, stored on your device (browser local storage), and a scrambled (hashed) copy on our side. Also a hashed recovery code if you set one up	To keep you signed in and let you get your account back
Small settings on your device: sound on or off, whether you've installed the app or dismissed the install prompt	To remember your choices. These stay on your device. We don't use advertising or tracking cookies
Your IP address. Our host, Cloudflare, sees it when you connect. We store only a one-way hash of it on your account	Stopping abuse: multiple accounts, chip farming, attacks on the service
Gameplay: hands played, actions at the table, your chip ledger (every chip in or out and why), daily claims, league results, clubs, friends, quick-chat reactions	To run the game, keep balances correct, check fair play and settle leagues
Reports you make or that are made about you, and moderation actions	To keep the game safe and deal with complaints
Your 18+ confirmation	To keep the game adults-only
Purchase records (only if purchases are switched on later): pack, price, status, time and Stripe's reference. Card details go to Stripe, never to us	To deliver what you bought, enforce your spend limits and meet our legal and tax obligations

We don't collect your real name, email address, phone number, contacts or precise location to play. There's no free-text chat or private messaging.

3. Our lawful bases (UK GDPR)

Contract: to provide the game you've asked to play (your account, chips, tables, leagues, clubs and friends).
Legitimate interests: fair play, preventing fraud and abuse, keeping the service secure, and handling reports. We've weighed these against your privacy and keep the data to a minimum, for example by hashing IP addresses.
Legal obligation: keeping purchase and tax records, if purchases are switched on, and responding to lawful requests.

4. How long we keep it

Account, gameplay and chip ledger: while your account exists. If you ask us to delete your account, we'll remove it within one month.
Guest accounts that haven't been used for 12 months may be deleted.
Reports and moderation records: up to 2 years after they're closed, so repeat abuse can be spotted.
Purchase records, if purchases are switched on: 6 years, as UK tax law requires.
Our host's security logs are kept only for short periods, in line with Cloudflare's policies.

5. Who we share it with

We don't sell or rent your data, and we don't share it with advertisers. We use these service providers (processors), who handle data only on our instructions:

Cloudflare hosts and runs the game, its storage and its security.
Stripe will process payments, but only once purchases are switched on.

Other players see your display name, @handle, avatar, table play, league standing and club membership. We may disclose data if the law requires it. Some providers may process data outside the UK. Where they do, they use safeguards approved under UK law, such as the UK International Data Transfer Addendum.

6. Your rights

You can ask to see, correct, delete or get a copy of your data. You can also object to or restrict how we use it. Email mindmoves3@gmail.com with your @handle. We may ask you to prove the account is yours, for example from your signed-in device. We'll reply within one month. If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to sort it out first.

7. Under 18s

The game is for adults only. If we learn we hold data about someone under 18, we'll delete the account.

8. Profile photos (coming soon)

We're planning optional profile photos. They're not live yet. Before we switch them on, we'll update this section to explain what we store, who can see your photo, how photos are moderated, how long we keep them and how to remove yours. Photos will always be optional. You'll still be able to use a built-in avatar instead.

9. Security

Connections are encrypted (HTTPS). Sign-in tokens, recovery codes and IP addresses are stored only as one-way hashes, and admin tools are restricted and logged.

10. Changes

If we change this notice, we'll update the date at the top. If a change is important, we'll tell you in the game.

11. Play safe

If gambling of any kind is affecting you or someone close to you, free, confidential help is available:

GamCare: National Gambling Helpline 0808 8020 133, open 24 hours a day
BeGambleAware: advice, tools and support
GAMSTOP: free self-exclusion from UK gambling sites