Privacy Policy

Last updated 21 September 2026 · applies to solvedspot.com

Signed out — the default

GTO Trainer works entirely in your browser. Hands you play, decisions you're graded on, and hands you save for review are stored only in this browser's local storage. Nothing is sent to a server. There is no account, no cookie, and no way for us to see what you did, because it never left your device.

If you sign in

Signing in is optional and exists for one reason: so your practice record follows you to a second device. It uses GitHub or Google's own sign-in (OAuth) — you never give this site a password. When you sign in we store:

• the account id your provider gives us, so we know it's you next time;
• your name and email address, exactly as the provider hands them back — and only if the provider confirms the email is verified; an unverified address is discarded rather than stored as if it were yours;
• the practice decisions and hand histories you generate while signed in, so they can sync between devices;
• a session cookie, so you stay signed in between visits. It's marked Secure and HttpOnly and is never readable by page scripts.

We do not receive your password, your OAuth access token, or anything else from the provider beyond the profile fields above — the token is used once, to ask who you are, and then dropped.

What we don't do

• No advertising, no ad trackers, no third-party pixels.
• No selling or sharing of your data with anyone, for any reason.
• No cross-site tracking. The Content-Security-Policy this site serves blocks the page from talking to any server that isn't this one.

Analytics

This site can use Cloudflare Web Analytics, a cookieless, aggregate page-view counter that cannot identify you individually and doesn't build a profile of you across sites. It is off unless the deployment is explicitly configured with an analytics token — the source is public, so you can check whether it's on. If enabled, it's covered by Cloudflare's privacy policy in addition to this one.

Cookies

The only cookie this site sets is the session cookie described above, and only if you choose to sign in. It's strictly necessary for that feature to work — it is not used to track you across other sites, and there are no advertising or "preference" cookies. A short notice about this appears the first time you visit; dismissing it just remembers that you've seen it, in your browser's local storage, not a cookie.

Your data, on request

If you're signed in, you can export everything stored about you (Account panel → "export my data") or delete your account and everything on the server (Account panel → "delete my account and server data") at any time, without asking anyone. Deleting your account does not touch the copy already saved in your browser — clear that yourself if you also want it gone locally.

Where data lives

Server-side data (only created if you sign in) is stored in Cloudflare D1, backing this site's Cloudflare Pages deployment. No other processor holds a copy.

Children

This site is not directed at children and does not knowingly collect data from anyone under 16.

Changes

If what this site stores or why changes, this page will change with it and the "last updated" date above will move.

Contact

Questions about this policy, or a request about your data: [email protected].