Privacy Policy

Last updated August 27, 2026

Who we are

Kohunter is operated by Vincent Morin, based in Portugal. For anything in this policy, contact 20cent.morin@gmail.com.

What we collect

Using Kohunter requires an account. We collect:

• Account data — your email address and password (the password itself is never visible to us; Supabase, our authentication provider, stores it hashed).
• Tournament screenshots you upload — precise mode and the Mystery bounty helper read a payout table and bounty panel from a screenshot you provide (file upload or a pasted image link). The image is sent to Google's Gemini API to extract the numbers, and stored afterward so we can review extraction accuracy and let a second person reuse a recent screenshot of the same live tournament instead of paying for another read.
• Calculation inputs and results — the room, format, buy-in, field size and similar numbers you enter or that get read from a screenshot, along with the result shown.
• Feedback you submit — the "Something wrong?" button sends your comment plus a snapshot of what the calculator was showing at the time.
• Billing data — handled directly by Stripe; we only keep a reference (Stripe's customer/subscription id) to know your plan is active. We never see or store your card number.
• Technical data — sign-in timestamps and a per-session identifier used to enforce one active login per account, and standard web server logs (IP address, browser) kept briefly by our hosting providers for operating and securing the service.

Why we collect it

Every use above exists to run the service you signed up for:

• Providing the calculation itself (contract performance).
• Reading a screenshot you chose to upload, so you don't have to type the numbers by hand.
• Billing you for the subscription via Stripe.
• Security and abuse prevention — rate-limiting screenshot reads, enforcing one active session per account, investigating reported issues (legitimate interest).
• Improving extraction accuracy over time by reviewing how screenshots were read.

We do not sell your data, and we do not use it for advertising.

Who else sees it

We use a small number of providers to run Kohunter, each processing only what they need to:

• Supabase — our database, authentication and file storage provider. [Confirm and state your Supabase project's hosting region here — Project Settings → General on supabase.com.]
• Google (Gemini API) — receives the screenshot you upload, purely to read the numbers off it. Google's own privacy policy governs how they handle that request.
• Stripe — processes your subscription payment. Stripe's own privacy policy governs your payment data.
• Render (backend hosting) and Vercel (frontend hosting) — infrastructure providers, standard hosting logs only.

Some of these providers may process data outside the European Economic Area (notably Google and Stripe, both US-based). Where that happens, it relies on the safeguards those providers publish (such as Standard Contractual Clauses) — see their own privacy policies for details.

How long we keep it

Your account data is kept for as long as your account exists. Uploaded screenshots, extraction results, calculation history and feedback reports are currently kept indefinitely — we don't yet auto-delete them on a schedule. If you'd like your account and associated data deleted, email us and we'll do it by hand; we're a small early-access product and this isn't self-service yet.

Your rights

Under the GDPR, you can ask us to: give you a copy of your data, correct it, delete it, restrict or object to some of our processing, or receive it in a portable format. Email 20cent.morin@gmail.com and we'll act on it. You can also lodge a complaint with Portugal's data protection authority, the CNPD (Comissão Nacional de Proteção de Dados), cnpd.pt.

Cookies

We use only the cookies needed to keep you signed in (set by Supabase Auth) — no advertising or third-party tracking cookies.

Security

Data is encrypted in transit (HTTPS). Access to the database and file storage is restricted to the backend service; uploaded screenshots are kept in a private storage bucket, never public. We run regular reviews of the app's own security as it develops.

Who can use Kohunter

Kohunter is meant for adults who are legally permitted to play the poker formats it covers in their jurisdiction. We don't knowingly collect data from children.

Changes to this policy

We'll update this page if what we collect or why changes, and update the date at the top. For material changes, we'll also email active accounts.