Privacy Policy

Your account. The email address you sign up with, your username, and — if you set them — a password, an avatar image and a country. The email address is what identifies your account and is how sign-in links reach you.

Your play. The matches you play: the hands, the actions you took, when you took them, the result, and the rating changes that followed. This is the product — a match is recorded so it can be replayed and reviewed, and so a rating can be justified rather than asserted.

Anonymous page counts. When a page loads we record that a page of a given kind was viewed — for example “landing” or “leaderboard”. The record is the page category and nothing else. It carries no identifier, no account, and no address bar contents, so it cannot be tied back to you or joined up into a trail.

Ordinary server logs. Like any website, our web server records requests as they arrive, which includes IP addresses. These are operational records used to keep the site running and secure.

• We do not sell your data, and we do not share it for advertising.
• We run no third-party analytics and no advertising trackers. There are no tracking pixels and no third-party scripts on the site.
• We do not take payment details, because there is nothing to pay for — Duel is free, with no real money, no prizes and no cash-out.
• We do not profile you for advertising or sell access to you as an audience.

Duel sets one cookie, duel_session, once you sign in. It keeps you signed in and nothing else. It is not an advertising cookie and it is not shared with anyone.

You can clear it at any time in your browser; doing so signs you out. Because the only cookie we set is the one that makes signing in work, there is no tracking to consent to and no consent banner.

To run your account and sign you in; to run matches and calculate ratings, seasons and standings; to show public leaderboards; to keep the game fair and investigate behaviour that breaks the rules; to keep the service secure and working; and to count how many people visit, in the anonymous form described above.

Other players. Your username, your rating and your results are public — they appear on leaderboards and in match records. Your email address is never shown to other players.

Our infrastructure. The site runs on servers operated by NullH, and sign-in emails are delivered through NullH's mail service. We do not pass your data to anyone else except where the law requires it.

Account details are kept while the account exists. Match records and ratings are kept as long as the ladder they belong to is meaningful — a rating that cannot be traced back to the matches that produced it is not a rating anyone should trust. Server logs are kept for a short operational period and then rotated away.

You can change your username, avatar and country in your account settings, and you can remove an avatar you uploaded.

Deletion is by request, not a button. There is currently no self-serve delete in the product, and we would rather say that plainly than point you at a control that is not there. Ask us and we will delete your account and the personal data attached to it.

Depending on where you live you may also have the right to a copy of your data, to correct it, or to object to some of its uses. Ask and we will action it.

Duel is for people aged 18 and over, and is not directed at children. If we learn that an account belongs to someone under 18, we will close it.

If this policy changes, the date at the top changes with it. Material changes will be reflected here before they take effect.

Duel.poker is operated by NullH. To ask about this policy, to request your data, or to have your account deleted, contact us through nullh.xyz.

The Terms of Service cover the rest of your use of the site.