The short version
Your data is yours. We never sell it, share it with advertisers, or use it for anything other than running ChipClimb.
ChipClimb collects the minimum data required to run the app. You can export it or delete it at any time from Settings.
What we collect
ChipClimb stores only what you explicitly provide:
- Email address — used solely for account login and password resets.
- Session data — buy-ins, cash-outs, dates, venues, hours, notes. Everything you log manually.
- Display name and social settings — the name you choose for the friends feature; discoverable and sharing toggles you set.
- Opponent notes — names, tendencies, and notes you write about other players you've faced.
We do not collect device identifiers, IP addresses (beyond what our infrastructure logs for security), browser fingerprints, or behavioural analytics. There are no third-party analytics SDKs on ChipClimb.
How it's stored
- All data is stored in a managed PostgreSQL database with enterprise-grade security.
- Data is encrypted at rest (AES-256) and in transit (TLS 1.3).
- Row Level Security (RLS) is enforced on every table — even at the database level, each user can only access their own rows.
- Cross-user features (stat comparison, challenges) use security-definer database functions that expose only aggregate values — individual sessions, venues, and notes are never accessible to other users.
What we never do
- We do not sell your data. Ever. To anyone.
- We do not share your data with advertisers, data brokers, or third-party analytics companies.
- We do not show your email to other users. Only display names are visible in social features.
- We do not run ads or use your data to build ad profiles.
- We do not use session recording tools, heatmaps, or behavioural tracking.
Social features and sharing
Social features are entirely opt-in and off by default:
- Discoverable is off by default — no one can find or add you until you turn it on.
- Stat sharing is off by default — friends cannot see your stats until both of you explicitly enable it.
- When stat sharing is on, friends can see only aggregate totals (total profit, hourly rate, win rate, ROI, session count). Individual sessions, venues, and notes are never shared.
Cookies
ChipClimb uses one session cookie to keep you logged in. There are no advertising cookies, tracking pixels, or third-party cookies of any kind.
Your rights
You have the right to:
- Export your data — Settings → Your Data → Export all data to CSV.
- Delete your session data — Settings → Your Data → Delete all session data.
- Delete your account entirely — Settings → Your Data → Delete my account. This permanently removes your account and all associated data from our systems.
These actions are permanent and immediate. We do not retain deleted data.
Refunds
ChipClimb Pro is billed monthly. You may cancel at any time; Pro access continues through the end of the current billing period.
- Refunds are limited to the most recent charge only. Monthly subscribers may request a refund for the current month's payment. Annual subscribers may request a refund for their annual payment. Refunds cannot be requested for charges from prior billing periods — for example, you cannot request a refund several months into an annual subscription for the original purchase.
- Requests must be submitted within 14 days of the charge being refunded. Requests outside this window will not be honoured.
- Partial-month refunds are not issued. If you cancel mid-cycle, access runs to the end of the paid period and no partial refund is owed.
- To request a refund, email privacy@chipclimb.app with your account email and the date of the charge.
Limitation of Liability
To the maximum extent permitted by applicable law:
- Liability cap. ChipClimb's total liability for any claim arising from your use of the service is limited to the amount you actually paid to ChipClimb in the 12 months preceding the claim.
- Data security. We employ industry-standard security (AES-256 encryption, TLS, row-level security), but no platform can guarantee 100% security. ChipClimb is not liable for any data breach, unauthorized access, or data loss, except where required by law. By using ChipClimb you acknowledge and accept this inherent risk.
- No consequential damages. ChipClimb is not liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the service.
- No lawsuit for data incidents. To the fullest extent permitted by law, you waive any right to bring legal action against ChipClimb arising from a security incident, data breach, or unauthorized access to your data.
Nothing in this section limits liability that cannot be excluded under applicable law, including mandatory statutory consumer rights.