Skip to content

Privacy Policy

Effective 13 October 2026
Nonsense is a poker session tracker for home games, available on Android and at nonsense.adamchok.com. It is built and run by Adam Chok, an individual developer based in Malaysia (“we”, “us”), who is responsible for your personal data as described here. This policy explains what information Nonsense collects, why, who can see it, and the choices and rights you have. It is also available in Bahasa Melayu.

Information we collect

Account information. When you sign in we receive your email address and a unique account ID from Firebase Authentication. If you sign in with Google, we receive your Google account’s email address and basic profile information for the purpose of signing you in. If you sign up with email and password, your password is handled by Firebase Authentication and is never visible to us.
Profile. The display name and avatar you choose, and your friend reference code. These are shown to your friends, group members and other players in sessions you join.
Content you create. Poker sessions and their details (date and time, optional location name, optional blinds, buy-ins, re-entries, cash-outs, results and settlements), your saved locations, friends and friend requests, and groups and their members.
Information about other people. When you host a session you may add other players, including guests who do not use Nonsense, by entering a name for them. Other users may likewise add you to their sessions and groups. Only add people in ways they would expect.
Settings on your device. Your theme preference and sign-in state are stored locally on your device.
Technical information. Our hosting and backend providers process standard technical data, such as IP addresses, device and browser type, and request logs, to deliver and secure the service.
Camera and photos. Nonsense uses the camera, or a photo you pick from your library, only to read friend QR codes, and only after you allow it in your device settings. The image is processed on your device and is not uploaded or stored. Nonsense does not record audio.
What is required. An account (email or Google) and a display name are needed to use Nonsense. Everything else, such as locations, blinds, avatars, friends and groups, is optional. If you do not provide the required information you will not be able to use the app.
Please do not enter sensitive information, such as health, religious or financial account details, in names, locations or other free-text fields.

Where information comes from

  • From you, when you sign up, edit your profile and use the app.
  • From Google, if you choose to sign in with Google.
  • From other users, when they add you to a session, a group or their friends list.
  • Automatically, from your device and our service providers, as described above.

How we use information

We only use personal data for the purposes below. Where data protection laws such as the GDPR ask for a legal basis, it is shown in brackets.
  • To create your account, sign you in and keep your records in sync across your devices (to provide the service you asked for).
  • To show session results, history, statistics and leaderboards to you and to the people you play with, including keeping shared session records accurate for the other players (to provide the service, and our and other players’ legitimate interest in an accurate shared record).
  • To let you find and connect with friends and groups (to provide the service).
  • To send account emails, such as email verification and password reset (to provide the service). We do not send marketing emails.
  • To keep the service secure, prevent misuse, and find and fix problems (our legitimate interest in running a safe, working service).
  • To comply with the law and respond to lawful requests (legal obligation).
  • To read a friend QR code with your camera (your permission, which you can withdraw in your device settings).
We do not sell your information, use it for advertising, build advertising profiles, use it to train AI models, or make automated decisions about you that have legal or similarly significant effects.

Google user data

If you sign in with Google, Nonsense only accesses your email address and basic profile information, and uses them only to create and sign in to your Nonsense account. We do not access any other Google data. Nonsense’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who can see your information

Other users. Your display name, avatar and reference code can be seen by people who add you as a friend. Session details and results are visible to the players in that session, and group leaderboards are visible to that group’s members. Anyone you share a session summary or QR code with can see what it contains.
Service providers. Google Firebase (sign-in, database and server functions; the database is stored in Singapore), Cloudflare (website hosting) and Expo (app updates). They process data on our behalf, under their data protection terms, only to run the service.
Legal reasons. We may disclose information if required by law, or where needed to protect the rights, property or safety of users and others.
A new owner. If Nonsense is ever transferred to someone else, your information may move with it, and this policy will continue to apply to it.
We do not share your information with anyone else.

Cookies and local storage

Nonsense does not use advertising, analytics or tracking cookies. The website and app store a few items on your device that are strictly necessary for them to work: your sign-in session (kept by Firebase Authentication), your theme preference, and a note of whether you were signed in, so the right page loads first. Because these are essential, we do not ask for consent to them. You can clear them at any time in your browser or device settings, which will sign you out.

Where your data is processed

Your database records are stored in Singapore. Our service providers may also process data in other countries, including the United States, where privacy laws may differ from those where you live. When data is transferred, we rely on our providers’ data protection commitments, including standard contractual clauses where the law requires them, so that it stays protected to a comparable standard.

Retention and deletion

We keep your information for as long as your account exists. You can delete your account at any time in the app under Profile, then Delete account; this takes effect immediately. If you cannot sign in, email [email protected] from the email address on your account and we will delete it within 30 days.
Deleting your account removes your profile, sign-in, friends, friend requests, groups you own, saved locations and sessions only you and your guests played. Sessions other players took part in keep the amounts recorded, so their history stays accurate, but your name is replaced with “Deleted player” and is no longer linked to any profile.
Deleted data may remain in our providers’ backups for a limited period (for Google Cloud, up to about 180 days) before it is permanently erased, and is not used in the meantime. Technical logs are kept by our providers for short periods for security. Information that has been anonymised so it can no longer identify you may be kept.

Security

Data is sent over encrypted connections (HTTPS), stored encrypted by our providers, and protected by access rules so that only the right people can read it. No system is perfectly secure, but we take reasonable steps to protect your information. If a data breach is likely to cause you significant harm, we will tell you and the relevant authorities as the law requires.

Your rights and choices

Depending on where you live, you have some or all of these rights:
  • Access. Ask for a copy of the personal data we hold about you.
  • Correction. Fix inaccurate data. You can change your name and avatar in the app at any time.
  • Deletion. Delete your account in the app under Profile, then Delete account, or ask us to delete specific data.
  • Portability. Ask for your data in a common, machine-readable format.
  • Objection and restriction. Object to, or ask us to limit, how we use your data, including where we rely on legitimate interests.
  • Withdrawing permission. Turn off camera access in your device settings at any time.
To make a request, email [email protected] from the email address on your account so we can confirm it is you. Requests are free, and we will reply within 21 days (or sooner where the law requires). If we cannot do what you ask, we will explain why.
If you are unhappy with how we handle your data, please contact us first. You can also complain to a data protection authority: in Malaysia, the Personal Data Protection Department (JPDP); in the EU, your local authority (see the list of EU data protection authorities); in the UK, the Information Commissioner’s Office.

Notice for US residents

We do not sell or share personal information for targeted advertising, as those terms are defined in US state privacy laws, and we do not use sensitive personal information to infer characteristics about you. You can use the rights described above, and we will not treat you differently for doing so.

Children

Nonsense is intended for adults aged 18 and over and is not directed at children. If you believe a child has created an account or been added to a session, contact us and we will delete their information.

Changes to this policy

We may update this policy. If we make significant changes we will update the date above and let you know in the app before they take effect. This policy is available in English and Bahasa Melayu; if the two differ, the English version applies.

Contact

Adam Chok, Malaysia. Questions or requests: [email protected]