Privacy Policy

Last Updated: September 2026

At My Gambling Assistant, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data.

Our Commitment to Your Privacy

We prioritize user data security above all else. Your privacy is not for sale.

  • No Third-Party Data Sharing: We do not provide, share, or sell your data to third parties for their own purposes. The only outside companies that handle any of your data are the service providers that run the site for us, listed in Section 5
  • No Advertising: This site will never display advertisements
  • No Data Sales: Your data will never be provided to or sold to advertising agencies, companies, or any other entities
  • No Monetization of Data: Under no circumstances is your user data used for monetary gain, advertising, marketing, or any commercial purposes

1. Information We Collect

We collect information that you provide directly to us, including:

  • Account Information: Email address, username, and authentication credentials
  • Gambling Activity Data: Session logs, cash in/out amounts, game types, casino locations, and related notes
  • Location Data: Geographic coordinates when you log gambling sessions (optional)
  • Photos: Images you choose to upload with your gambling sessions (Pro feature)
  • Usage Data: Information about how you interact with the service, such as pages visited and simulator activity
  • Chat and Support Messages: Messages and images you post in chat channels, and support tickets you submit
  • Preferences and Settings: Saved simulator configurations, counting systems, tracker settings, and push-notification preferences (including your browser's push token if you enable notifications)

Device and Security Information

To keep accounts secure and to stop abuse (such as automated attacks, account sharing, or ban evasion), we automatically collect the following when you use the site, whether or not you are signed in:

  • IP Address and Network Information: Your IP address, and the approximate location (city, region, country), internet provider, and network type (for example, whether it is a mobile carrier, VPN, or hosting provider) derived from it
  • Browser Information: Your browser's user-agent string and the dates and times of your visits
  • Browser Identifier: A random identifier stored in a cookie and in your browser's local storage, unique to each browser
  • Device Identifier: A physical-device identifier derived from hashed (one-way scrambled) characteristics of your device and its settings, such as installed fonts, available system voices, graphics hardware, screen size, accessibility and text-size settings, time zone, language and region formats, and device model and operating-system version. It is used only to recognize the same device across different browsers so that security measures apply to the device, not to other people who share your network. It cannot reveal your name, files, or contacts
  • Account Association: Which of these browsers and devices have been used to sign in to which accounts
  • Security Events: Records of sign-ins, failed sign-in attempts, access to blocked or suspicious addresses, bans, and account restrictions

2. How We Use Your Information

We use the information we collect solely to provide and improve our services. We use your information to:

  • Provide, maintain, and improve our services
  • Process your transactions and manage your account
  • Send you service-related communications (account updates, subscription notifications)
  • Generate statistics and analytics for your personal gambling activity (visible only to you)
  • Ensure the security and integrity of our service, including detecting and preventing abuse, fraud, and automated attacks (see Section 3)
  • Comply with legal obligations

We do NOT use your information for:

  • Advertising or marketing purposes
  • Sharing with third parties for commercial gain
  • Creating user profiles for advertising
  • Targeted advertising or behavioral tracking
  • Any form of data monetization

3. Data Storage, Security, and Abuse Prevention

User data security is our top priority. We implement multiple layers of security to protect your information and ensure it is never accessed, shared, or used inappropriately.

Secure Data Storage

All user data is stored securely using industry-standard encryption and security practices:

  • Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols
  • Encryption at Rest: Sensitive data stored in our databases is encrypted to protect against unauthorized access
  • Firebase Security: User data is stored in Firebase Realtime Database with strict security rules and access controls
  • Secure Authentication: User authentication is handled through Firebase Authentication, which uses industry-standard security protocols

Access Controls

Access to user data is strictly controlled:

  • Only authorized administrators have access to user data for support and maintenance purposes
  • All access is logged and monitored for security purposes
  • User data is never shared with third parties except as described in this policy

Abuse Prevention and Automated Security

We use automated systems to protect the site and its users. These systems use the device and security information described in Section 1 and may:

  • Limit request rates: Temporarily slow down or refuse requests from a browser, device, or IP address that sends an unusually high number of requests
  • Block IP addresses, locations, browsers, or devices: Automatically ban sources of malicious activity, such as probing for private files or system vulnerabilities, or repeated failed sign-in attempts
  • Protect people on shared networks: Because many unrelated people can share one IP address (for example, on mobile carrier networks or public Wi-Fi), our automated systems do not ban mobile-carrier IP addresses. They block only the specific browser and device involved, so other people on the same network, including those using the same make and model of device, are not affected
  • Restrict accounts automatically: If you are signed in when your activity triggers an automated ban, your account is automatically restricted until an administrator reviews and removes the restriction.

4. Payment Processing and Pro Subscriptions

Secure Payment Processing with Stripe

We never see or store your payment information. All Pro subscription payments are processed securely through Stripe, a PCI DSS Level 1 certified payment processor.

What Stripe Handles

Stripe securely processes and stores:

  • Payment Card Information: Credit card numbers, expiration dates, and CVV codes
  • Billing Information: Billing addresses and contact information
  • Payment Transactions: All payment processing and transaction history
  • Subscription Management: Subscription status, renewal dates, and billing cycles

What We Receive from Stripe

Stripe securely communicates to us only the information necessary to manage your Pro subscription:

  • Subscription Status: Whether your subscription is active, cancelled, or expired
  • Subscription ID: A unique identifier for your subscription
  • Customer ID: A unique identifier linking your account to your Stripe customer record
  • Renewal Dates: When your subscription will renew or expire
  • Payment Status: Whether payments were successful or failed (no card details)

What We Never See

We do not have access to:

  • Your credit card numbers or payment card details
  • Your CVV codes or card security information
  • Your full billing address (only what you choose to share)
  • Your bank account information
  • Any other sensitive financial information

Stripe Security Standards

Stripe maintains the highest security standards:

  • PCI DSS Level 1 Compliance: The highest level of payment card industry security certification
  • Tokenization: Payment information is tokenized and never stored in plain text
  • Encryption: All payment data is encrypted using industry-standard encryption
  • Regular Audits: Stripe undergoes regular security audits and compliance checks
  • Fraud Protection: Advanced fraud detection and prevention systems

Managing Your Subscription

You can manage your Pro subscription, update payment methods, and view billing history through the Stripe Customer Portal. This portal is hosted and secured by Stripe, ensuring your payment information remains protected.

5. Data Sharing and Disclosure

We do not provide, share, or sell your personal information to any third parties for any purposes. Your data is never used for advertising, marketing, or any form of monetization.

Strict No-Data-Sharing Policy

  • No Advertising: This site will never display advertisements, and we do not partner with advertising networks
  • No Data Sales: We never sell, rent, or trade your personal information to advertising agencies, data brokers, marketing companies, or any other third parties
  • No Monetization: Your user data is never used for monetary gain, advertising revenue, marketing purposes, or any commercial exploitation
  • Limited Site Analytics: We use Google Analytics for Firebase and Vercel Web Analytics only to measure overall site usage (such as which pages are visited and general device and browser types). We do not send them your gambling activity, chat messages, or account details, and we do not use them for advertising
  • No Tracking for Advertising: We do not use tracking technologies for advertising or marketing purposes

The only limited exceptions where information may be shared are:

  • Service Providers That Run the Site: We rely on a small number of providers that process data only on our behalf, to operate the service:
    • Google Firebase: account sign-in, data storage, photo and image storage, and push notifications
    • Vercel: website hosting
    • Our email delivery provider: sending account, security, and subscription emails
    • ip-api.com: receives your IP address only, to look up its approximate location and network type for security purposes
    • Cloudflare Turnstile (when enabled): human-verification checks on some forms
    • CARTO: supplies the map images (built from OpenStreetMap data) when you view a map; like any website, it receives your IP address and browser information
  • Payment Processing: With Stripe, our payment processor, solely for processing Pro subscription payments. Stripe only receives payment information (which we never see) and subscription status updates. No gambling activity data or personal information beyond what's necessary for payment processing is shared.
  • Legal Requirements: When required by law, court order, or government regulation. We will only disclose the minimum information necessary to comply with such requirements.
  • Protection of Rights: To protect the rights, property, or safety of My Gambling Assistant, our users, or others, in cases of suspected fraud, abuse, or security threats.

Even in these limited circumstances, we never share your gambling activity data, location data, or any personal information for advertising, marketing, or commercial purposes.

6. Your Rights and Choices

You have the right to:

  • Access Your Data: View and download your gambling activity data at any time
  • Update Your Information: Modify your account information through your account settings
  • Delete Your Account: Request deletion of your account and associated data
  • Opt-Out: Unsubscribe from non-essential communications
  • Data Portability: Export your data in a standard format
  • Appeal a Restriction or Ban: If your account is restricted or your access is blocked and you believe this is a mistake, you can contact Support, or submit an appeal from the blocked-access page

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or regulatory purposes.

Security records (such as IP addresses, browser and device identifiers, security event logs, and records of bans and restrictions) are kept for as long as needed to protect the service and may be retained after an account is deleted, so that bans cannot be evaded by deleting and re-creating an account. Security event logs are automatically trimmed, oldest first, as new events are recorded.

8. Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the service after such changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through the 'Contact Support' link at the bottom of the home page.