Privacy policy

• No accounts, no email, no profile. Display name only.
• Rooms are ephemeral. Room metadata is deleted ~10 minutes after the last person leaves.
• Votes, reactions, and presence are never stored on our servers — they live only in real-time channels.
• Google Analytics (via Firebase) only fires if you accept it. Reject and the app works identically.

Quokka Poker is operated by Tchelow (ABN 92 429 280 221) ("we ", "our", "us") — a free planning poker tool for agile teams. This policy explains what we collect, why, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Information you give us directly

• The display name you choose for a room (stored in your browser's localStorage; broadcast to others in the same room).
• Room name, settings, and a hash of any room password (stored in our database).
• Votes, emoji reactions, host actions (broadcast in real-time to others in the same room — not stored on our servers).

Information collected automatically

• A short-lived anonymous identifier issued by Supabase to authorise your access to a room's real-time channel. Deleted within ~1 hour after you leave.
• Approximate IP address, browser type, device type, screen size — collected by our hosting provider (Cloudflare) for security and reliability. Not used for tracking.

Analytics (only with your consent)

If you accept, Google Analytics 4 (via Firebase) collects: a client identifier in a cookie, page views, anonymised IP, browser/device info, and these custom product events:

room_created · room_join_attempted · room_join_succeeded · room_join_failed · invite_link_visited · room_link_copied · room_code_copied · round_started · vote_cast · votes_revealed · revote_started · estimate_locked · issue_added · theme_changed · deck_changed · reveal_animation_changed · dark_mode_toggled · reaction_sent · host_transferred · player_kicked · player_muted · realtime_disconnected

We never send your display name, room name, room codes, or vote values to analytics. Events carry only categorical metadata (e.g. deck, theme, privacy mode, reason codes).

If you reject, we use Google Consent Mode v2 — only cookieless, anonymised pings are sent. No identifier and no cookie are set.

Email addresses, phone numbers, real names, account credentials, payment information, vote values, room names, or display names (in analytics).

• To run the planning poker session (broadcast votes, presence, host actions).
• To prevent abuse (rate limiting, moderation).
• If you've accepted analytics: to understand which features people use, so we can improve the product.

We use the following third-party processors:

• Supabase (database, real-time, anonymous auth) — data hosted in AWS Asia Pacific (Tokyo, ap-northeast-1).
• Cloudflare (hosting, edge delivery) — global edge.
• Google Firebase / Google Analytics (analytics, opt-in only) — global.
• Lovable (deployment platform).

We don't sell your data, and we don't use it for advertising.

Some processors handle data outside Australia (United States, EU, Japan). By using Quokka Poker, you consent to your data being processed in those locations. We rely on each provider's contractual safeguards (Standard Contractual Clauses, Google Data Processing Terms).

• Strictly necessary (localStorage): remembers your display name, dark-mode preference, and per-room identity. Always on; not used for tracking.
• Analytics (opt-in): Google Analytics cookies (_ga, _ga_*) — only set after you accept analytics. You can change your mind any time.

You can:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Withdraw consent for analytics at any time (re-open the banner via the button above, or clear cookies).
• Make a complaint about our handling of your data.

Contact us at hello@tchelow.com. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au.

Quokka Poker isn't directed at children under 13. We don't knowingly collect personal information from children.

We'll update this page if we change what we collect or how we use it. The "Last updated" date at the top reflects the most recent change.

hello@tchelow.com