Privacy
The Ledger keeps the smallest amount of information it can and still be a ledger. This says exactly what that is, who can see it, and how to get rid of it.
What we store
Your account. An email address and a password. The password is never stored as you typed it — our authentication provider keeps a one-way hash, and nobody at The Ledger can read it or recover it.
Your display name. Whatever you choose. It can be changed at any time in Settings, and each club can hold a different name for you.
Your game history. Buy-ins, cash-outs, who owed whom, which nights you played, and any notes typed against a settlement. This is the point of the app.
Nothing else. No location, no contacts, no advertising identifiers, no analytics following you around other sites. We do not sell anything to anyone, and there is nothing here to sell.
Who can see it
The clubs you belong to. A home game is a shared record: the people at the table can see what everybody bought in for and what everybody left with, because otherwise the money cannot be settled. Assume your results are visible to the members of that club.
Nobody in another club. Clubs are separated in the database itself, not by hiding buttons in the app. A member of one club cannot read another club's games even if they go looking.
Where it lives
The database is hosted by Supabase in Tokyo, and the app runs on Vercel. Account emails are delivered by Resend. Each of those companies processes data on our behalf under their own terms.
The photo import
If you photograph a page of handwritten notes, that image is sent to Anthropic's Claude to be transcribed into text, and the text comes back for you to check before anything is saved. The photo travels through our server rather than from your phone directly, and we do not keep a copy of it once the transcription returns.
Only use it on your own game notes. If a page has somebody's personal details on it that have nothing to do with poker, crop them out or type the numbers in by hand.
We send email for one reason: to prove you control your address. Confirming a new account, a code when you change your password, a link when you have forgotten it. There is no newsletter and no marketing, so there is nothing to unsubscribe from.
Deleting your account
Settings has a Delete account control. It removes your login and your name, permanently and immediately, and it cannot be undone.
What it does not do is erase the games you played in, and it is worth being honest about why. A night's books have to balance: if your buy-ins vanished from a game five other people also played, their history and their settle-up would be wrong from then on. So the entries stay and your name comes off them — you appear as a former member with no account behind it, the same way a guest does. Nothing that remains identifies you.
If you are the only owner of a club, hand it to somebody else or delete the club first. Otherwise a club full of people would be left with nobody able to run it.
Children
The Ledger is not for anyone under 18.
Changes
If this changes in a way that matters, the app will say so rather than quietly swapping the page.
Contact
Questions about any of this go to privacy@ledgerclub.app.