Privacy Policy

Story Point Poker (“we”, “us”) is a real-time planning poker web application. This policy applies to the website and app experience available at this domain (the “Service”).

For general questions about the product, see our About page.

Depending on how you use the Service, we may process:

• Display names you enter when creating or joining a room (guests and registered users).
• Account data if you register: email address, password (stored as a secure hash, not as plain text), optional profile display name, and plan/subscription status.
• Room activity such as room codes, session names, story titles, votes, host role, timers, and presence signals needed to run a live session.
• Technical data such as IP address, browser type, device information, and logs generated by hosting, authentication, or security systems.
• Analytics data when Google Analytics is enabled: approximate location derived from IP, device/browser information, pages viewed, and similar usage metrics (see Analytics below).
• Preferences stored on your device (for example light/dark theme).

Guests can use core planning poker features without creating an email account. Guest sessions still use authentication tokens so the app can keep you in a room securely.

We use the information above to:

• Provide, operate, and secure planning poker rooms
• Show who is in a room, who has voted, and revealed results
• Maintain optional user accounts and plan entitlements
• Prevent abuse, debug issues, and improve reliability
• Display advertising on free rooms (see below)
• Measure traffic and improve the Service (analytics)
• Respond to support or privacy requests you send us

We do not sell your personal information. We do not use the contents of your private votes for advertising targeting.

We run the Service on infrastructure we operate. We do not sell your personal information. We may share limited data only when needed to:

• Show ads via advertising partners (see Advertising below)
• Process analytics via Google Analytics (see Analytics below)
• Process payments for an ad-free plan, if you choose to buy one — card details are handled by the payment processor, not stored on our servers as full card numbers
• Comply with law or protect the security of the Service

We and our partners use cookies, local storage, and similar technologies to operate the Service, measure usage, and to show ads.

• Essential — authentication/session cookies or tokens so you stay signed in during a room, and security-related storage.
• Preferences — for example your theme choice stored in local storage.
• Analytics — Google Analytics may set or read cookies to measure traffic and usage (see Analytics above).
• Advertising — third parties may set or read cookies as described below.

Room data is kept while a room is active and may be removed when the last participant leaves or when cleanup jobs remove idle sessions. Account profiles remain until you request deletion or close the account, subject to legal or security retention needs. Logs are kept only as long as reasonably needed for operations and abuse prevention.

You can:

• Use guest mode without registering an email account
• Update your display name in account settings when registered
• Leave rooms at any time
• Clear site data / cookies in your browser
• Opt out of personalized ads via the links above
• Contact us to request access, correction, or deletion of personal data we hold about you, where applicable law provides those rights

If you are in the EEA, UK, or Switzerland, additional rules may apply to consent for non-essential cookies and personalized advertising. We show a cookie banner so you can accept, reject, or customize analytics and advertising cookies. You can change your choice anytime via Cookie settings in the site footer.

The Service is aimed at professional and workplace use. It is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). Do not use the Service if you are under the age required by local law for this type of service.

We use industry-standard measures such as encrypted transport (HTTPS), access controls, and database security policies to protect app data. No method of transmission or storage is 100% secure; please use a strong unique password for registered accounts.

Depending on where the Service is hosted, data may be processed in data centers outside your country. Advertising or payment partners you interact with may also process data in other regions under their own terms.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after updates means you acknowledge the revised policy. Material changes may be highlighted on this page or in the product when appropriate.

For privacy questions or requests, contact us: contact@storypointpoker.io.