Privacy Policy

Story Point Poker (“we”, “us”) is a real-time planning poker web application. This policy applies to the website and app experience available at this domain (the “Service”).

For general questions about the product, see our About page.

Depending on how you use the Service, we may process:

• Display names you enter when creating or joining a room (guests and registered users).
• Account data if you register: email address, password (stored as a secure hash, not as plain text), optional profile display name, and plan/subscription status.
• Room activity such as room codes, session names, story titles, votes, host role, timers, and presence signals needed to run a live session.
• Technical data such as IP address, browser type, device information, and logs generated by hosting, authentication, or security systems.
• Analytics data such as approximate location derived from IP, device/browser information, pages viewed, traffic sources, and similar usage metrics (see Analytics below).
• Preferences stored on your device (for example light/dark theme).

Guests can use core planning poker features without creating an email account. Guest sessions still use authentication tokens so the app can keep you in a room securely.

We use the information above to:

• Provide, operate, and secure planning poker rooms
• Show who is in a room, who has voted, and revealed results
• Maintain optional user accounts and plan entitlements
• Prevent abuse, debug issues, and improve reliability
• Measure traffic and improve the Service (analytics)
• Respond to support or privacy requests you send us

We do not sell your personal information.

We host the Service using third-party cloud providers that process data on our behalf under their terms and our configuration. We do not sell your personal information. We may share limited data only when needed to:

• Host the application, authentication, database, and realtime features via our cloud infrastructure providers
• Process analytics via third-party analytics providers (see Analytics below)
• Comply with law or protect the security of the Service

We and our partners use cookies, local storage, and similar technologies to operate the Service and measure usage.

• Essential — authentication/session cookies or tokens so you stay signed in during a room, and security-related storage.
• Preferences — for example your theme choice stored in local storage.
• Analytics — third-party tools that measure traffic and usage (see Analytics above).

Room data is kept while a room is active and may be removed when the last participant leaves or when cleanup jobs remove idle sessions. Account profiles remain until you request deletion or close the account, subject to legal or security retention needs. Logs are kept only as long as reasonably needed for operations and abuse prevention.

You can:

• Use guest mode without registering an email account
• Update your display name in account settings when registered
• Leave rooms at any time
• Clear site data / cookies in your browser
• Contact us to request access, correction, or deletion of personal data we hold about you, where applicable law provides those rights

You can accept, reject, or customize non-essential cookies (analytics) when you first visit, and change your choice anytime via Cookie settings in the site footer.

The Service is aimed at professional and workplace use. It is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). Do not use the Service if you are under the age required by local law for this type of service.

We use industry-standard measures such as encrypted transport (HTTPS), access controls, and database security policies to protect app data. No method of transmission or storage is 100% secure; please use a strong unique password for registered accounts.

Depending on where the Service is hosted, data may be processed in data centers outside your country. Partners you interact with (for example analytics) may also process data in other regions under their own terms.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after updates means you acknowledge the revised policy. Material changes may be highlighted on this page or in the product when appropriate.

For privacy questions or requests, contact us: contact@storypointpoker.io.