Privacy Policy
Your Privacy Our Responsibility.
Committed to transparency, security, and responsible data handling.
Last Updated: Jul 12, 2026
1. INTRODUCTION
This Privacy Policy explains how [Company Legal Name] ("BLUF," "we," "us," or "our") collects, uses, stores, and shares information when you use the BLUF mobile and desktop application, website, and related online services (collectively, the "Service"). BLUF is a social Texas Hold'em poker game. We are designed for anonymous play: you can start playing without email, phone number, or social login. If you choose to purchase chips or withdraw winnings, additional payment-related information may be processed as described below. By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.
2. INFORMATION WE COLLECT
2.1 Account and identity information Because BLUF supports anonymous play, we may collect: - Device identifier — to create and restore your guest account on the same device - Internal user ID — to identify your account on our game servers - Display name — to show your name at tables, in lobbies, and on leaderboards - Avatar selection — to show your chosen avatar from our curated catalog only - Optional linked account data — if you choose to link Google or another provider, we receive the identifiers needed to connect that login to your BLUF account We do not require email, phone number, or real name to play.
2.2 Recovery code information BLUF uses a recovery code (format: BLUF-XXXX-XXXX-XXXX-XXXX) so you can restore your account on a new device. On your device: the recovery code may be stored locally in app storage so you can copy or reveal it. On our servers: we store only a one-way cryptographic hash of your recovery code, not the plaintext code. We also store recovery-related metadata such as acknowledgment status, regeneration count, rate-limit records, and audit logs of recovery attempts. We cannot recover your account if you lose your recovery code and no longer have access to your original device.
2.3 Gameplay and profile information We collect and store gameplay-related data needed to operate the Service, including: - Chip wallet balance and transaction history - Welcome bonus and daily free-claim status - Match history, buy-ins, payouts, rake/fees, and leaderboard/ranked rating - Wins, games played, and other profile statistics - Private room codes and table participation metadata - In-table chat messages you send during supported game modes
2.4 Payment and withdrawal information If you use paid features: - Crypto deposits: payment ID, coin type, crypto amount, deposit address, transaction status, and fulfillment records via our payment processor - Withdrawals: requested amount, destination wallet address (for example USDT TRC20), review status, payout transaction hash, and related audit records - Store purchases: package purchased, chips granted, first-purchase bonus eligibility, and purchase timestamps We do not store your private crypto wallet keys.
2.5 Technical and security information We automatically collect certain technical data, including: - IP address - App version and platform/OS information - Session tokens and authentication events - Device link history - Error logs, crash reports, and anti-abuse/security logs - Rate-limit and moderation records This helps us secure accounts, prevent fraud, and maintain the Service.
3. HOW WE USE INFORMATION
We use collected information to: 1. Provide the Service — authenticate you, run matches, manage chips, leaderboards, and social features 2. Secure accounts — recovery flows, fraud prevention, abuse detection, and enforcement actions 3. Process payments — fulfill chip purchases and review/process withdrawal requests 4. Improve the product — analytics, debugging, performance monitoring, and feature development 5. Communicate with you — support responses, service notices, and security alerts 6. Comply with law — respond to lawful requests and enforce our Terms of Service We do not sell your personal information.
4. LEGAL BASES FOR PROCESSING (EEA/UK USERS)
If you are in the European Economic Area or United Kingdom, we process personal data under one or more of the following bases: - Contract — to provide the Service you request - Legitimate interests — security, fraud prevention, analytics, and service improvement - Legal obligation — where required by applicable law - Consent — where required, such as for optional linked logins or certain communications You may withdraw consent where applicable without affecting the lawfulness of processing before withdrawal.
5. HOW WE SHARE INFORMATION
We share information only as needed to operate the Service: - Infrastructure and backend providers — hosting, databases, authentication, and game server operations - Payment processors — crypto deposit processing (for example NOWPayments) - Optional identity providers — if you choose to link Google or another login method - Analytics and crash reporting tools — app stability and performance, if enabled - Legal and safety purposes — to comply with law, protect users, prevent fraud, or enforce our policies Payment partners receive only the data needed to process transactions. We do not share your recovery code plaintext with third parties because we do not store it in plaintext on our servers. We may also share aggregated or de-identified data that cannot reasonably identify you.
6. DATA RETENTION
We retain information for as long as necessary to: - maintain your account and gameplay history - meet legal, tax, and accounting obligations - resolve disputes and enforce agreements - prevent fraud and abuse Examples: - Account/profile data: retained while your account is active and for a reasonable period afterward - Payment and withdrawal records: retained as required for financial, fraud, and compliance purposes - Security/audit logs: retained for a limited period based on operational and legal needs - Chat and moderation records: retained as needed for safety and enforcement When data is no longer needed, we delete or anonymize it where feasible.
7. YOUR RIGHTS AND CHOICES
Depending on your location, you may have rights to: - access the personal data we hold about you - correct inaccurate data - delete certain data, subject to legal exceptions - restrict or object to certain processing - data portability - withdraw consent where processing is consent-based - lodge a complaint with a supervisory authority Because BLUF accounts are anonymous, we may need your recovery code, user ID, or proof of account control to verify requests. Account deletion: contact us at privacy@bluf.space. Deletion may be irreversible and may affect chips, progress, and withdrawal eligibility.
8. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service or other reasonable means. Continued use after the effective date means you accept the updated policy.
8. Contact Us
If you have any questions about these Terms of Service, please contact us at:
Email: