Privacy Policy

This Privacy Policy describes how Tucker Burke, doing business as KnowTheDeck ("we," "us," or "our"), collects, uses, and protects your personal information when you visit or use knowthedeck.com and any related services (the "Services"). KnowTheDeck is an educational blackjack training web application. It is an educational and entertainment tool and does not facilitate gambling. By using the Services, you agree to the practices described in this policy.

1. Information We Collect

We collect personal information that you provide to us directly when you create an account or contact us. This includes:

• Email addresses
• Passwords
• Contact or authentication data

We do not collect or store your debit or credit card numbers. All payments are processed by our payment processor, Stripe, and your card details are handled directly by Stripe. We do not collect sensitive personal information, and we do not collect personal information about you from outside sources beyond the transaction confirmation data our payment processor provides as part of your own purchase.

2. How We Use Your Information

We use your personal information to provide and operate the Services and to fulfill our obligations to you. Specifically, we use it to:

• Deliver and facilitate delivery of services to you
• Fulfill and manage your orders and purchases
• Respond to your inquiries
• Send you administrative information
• Protect our Services, including diagnosing problems and preventing fraud
• Request feedback to improve your experience

We do not send marketing or promotional communications. Where required, we rely on the following legal bases for processing: performance of a contract, legitimate interests, consent, legal obligation, and vital interests.

3. How We Share Your Information

We do not sell or share your personal information for advertising purposes. We disclose information only to the third-party service providers we rely on to operate the Services. These fall into the following categories:

• Cloud computing services
• Data storage service providers
• Payment processors
• User account registration and authentication services
• Website hosting service providers

We have data processing agreements in place with our service providers where required. We may also share information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

4. Payments

We accept payments through Stripe. When you make a purchase, Stripe processes your payment and provides us with confirmation of the transaction. We do not store your payment card details. Stripe's handling of your information is governed by its own privacy policy, available at stripe.com/privacy.

5. Cookies and Tracking

We use cookies and similar technologies for essential purposes only, such as keeping you signed in and maintaining your session. We do not use analytics or advertising trackers.

6. Data Retention

We keep your personal information for as long as you have an account with us. When it is no longer needed, we will delete or anonymize it, or, if this is not possible, securely store it until deletion is possible.

7. Data Security

We have implemented appropriate technical and organizational security measures to protect your personal information, including encrypted connections (HTTPS), hashed passwords, row-level access controls, and reliance on Stripe's PCI-compliant payment infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Transfers

We are based in Canada, and our service providers may process your information in Canada and the United States. By using the Services, you understand that your information may be transferred to and processed in these countries.

9. Your Rights

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, or delete it. To update or delete your account, or to exercise any of your rights, please contact us using the information below. We handle data subject requests in accordance with applicable law, including PIPEDA (Canada), Quebec Law 25, the GDPR, and applicable US state privacy laws.

10. Children

The Services are intended for adults and are not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Services after any change means you accept the updated policy.