PRIVACY
Privacy Policy
VAULT — Version of August 26, 2026
1. Who is responsible for your data
VAULT is a service published and operated by:
DealMeIn, a French simplified joint-stock company (SAS) with a share capital of €100
Registered office: 60 rue François 1er, 75008 Paris, France
Registered with the Paris Trade and Companies Register (RCS) under number 101 149 540
Contact for any question about your personal data: privacy@vault-os.fr
DealMeIn is what the European regulation calls the data controller: we are the ones who decide which data is collected and why, and we are the ones you contact to exercise your rights.
2. What VAULT does with your data, in one sentence
VAULT archives your career as a player. To do that, we keep what you entrust to us: your result screenshots, the information extracted from them, and whatever you choose to make public. We sell no data, we hand none of it to advertisers, and we do not use your activity for advertising purposes.
3. The data we collect
3.1 Your account
| Data | Purpose | Legal basis |
|---|---|---|
| E-mail address | Account creation, login, service communications | Performance of the contract |
| VAULT handle | Identification within the service | Performance of the contract |
| Real name | Identity verification for certified performances | Performance of the contract |
| Country, city | Ranking by country, profile display | Performance of the contract |
| Bio, avatar | Profile customization | Consent |
| Handles used on the rooms | Linking your results to your account | Performance of the contract |
Login is by e-mail only. VAULT offers no social-network login and therefore retrieves no data from any third-party account.
Visibility settings. Your handle, your country and your city each have their own public/private switch, and your whole profile can be set to private. These settings are under your control at all times. By default, no data is public.
3.2 Your performances
When you add a performance, we keep:
- The screenshot you send. It is stored in a private space, accessible only to you and to our verification systems.
- The information extracted from that screenshot: tournament name, room, buy-in, winnings, finishing position, field size, session date.
- The verification elements: verification status, confidence score of the extraction, digital fingerprint of the file (which lets us detect when the same screenshot is sent twice), and the fields you corrected by hand.
- What you add: your personal notes, favorite marking, a replay link if you provide one.
- The result of the VAULT calculation: the VP awarded and the formula version used.
Legal basis: performance of the contract. This is the core of the service.
3.3 Sharing
You can generate a share link for a performance, and choose whether to attach the gameplay. In that case, the corresponding card becomes accessible to anyone with the link, with no VAULT account required.
Legal basis: your consent, given by the act of sharing.
Be aware of what that implies. A share link is public. We can revoke it and delete the file at your request, but we cannot retrieve copies a third party may already have made — a screenshot, a repost elsewhere. The same goes for your avatar, which is served from a public space.
3.4 Your subscription
Plan subscribed, status, trial end date, period end date, and the technical identifiers of your customer record and your subscription with our payment provider.
VAULT never sees your card number. It is entered directly with our payment provider and does not pass through our servers.
Legal basis: performance of the contract, and legal obligation as regards invoicing.
3.5 Access and security
We keep an access list (account status, access level, origin of the access, dates of granting, expiry and revocation) as well as a log of administrative operations — who granted, suspended or revoked an access, and when.
Legal basis: legitimate interest, for the security of the service and the traceability of access decisions.
We also count, month by month, the number of uploads and verifications you have made per room. This count is used solely to apply the limits of your subscription plan.
Legal basis: performance of the contract.
3.6 Ranking and network
Your VP total, your number of performances, your world rank and your national rank. The players you follow and those who follow you. The trophies you have unlocked.
Legal basis: performance of the contract.
3.7 What we do not collect
- No health data, no data about your mood or your psychological state.
- No banking data beyond the technical identifiers mentioned above.
- No browsing data for advertising or statistical purposes (see the Cookies section).
No data retrieved automatically from poker rooms or from any third-party results database: everything VAULT knows about your results comes from what you send yourself.
4. Who processes your data on our behalf
VAULT relies on a small number of technical providers. Each acts on our instructions, under a contract that obliges it to protect your data and prohibits it from using that data for its own purposes.
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, file storage, sending of login e-mails | European Union (Frankfurt) |
| Vercel | Application hosting | United States / global network |
| Stripe | Payments and subscriptions | European Union and United States |
| Anthropic | Automated reading of screenshots | United States |
How your screenshots are processed
When you send a screenshot, it is transmitted to Anthropic, which automatically extracts the tournament information from it. This provider does not use the transmitted data to train its models. The processing is automated: no human operator looks at your images in the normal course of the service.
Transfers outside the European Union
Your core data is hosted in Europe. However, the reading of screenshots, the hosting of the application and part of the payment processing involve a transfer to the United States. These transfers are governed by the standard contractual clauses adopted by the European Commission, which require these providers to ensure a level of protection equivalent to that of European law.
5. How long we keep your data
| Data | Duration |
|---|---|
| Account and performances, while the account is active | No limit — that is the principle of an archive |
| Inactive account | 36 months without login, then automatic deletion |
| After a deletion request | 30 days at most |
| Access log and administrative operations | 12 months |
| Invoices and accounting records | 10 years (French legal obligation) |
About inactivity. Before any automatic deletion, we write to you twice — at 30 and 34 months of inactivity — to warn you that your archive is about to be erased and give you time to log back in. A simple login resets the counter.
6. Deleting your account
You can request the deletion of your account at any time. Within 30 days:
- your profile, your performances, your screenshots, your notes, your trophies, your ranking and your network are deleted;
- your publicly shared cards are deleted and their links revoked — it being understood, once again, that we can do nothing about copies already made by third parties;
- your subscription is cancelled.
Three things survive this deletion, and we would rather tell you plainly:
- Invoices, which French law requires us to keep for ten years. They contain only the information needed for accounting.
- An entry in our administration log recording that the account was deleted, and on what date. Without that entry, the log would no longer serve its purpose.
- Your e-mail address in hashed form, where necessary to prevent the immediate reopening of an account that has been banned.
7. Your rights
The European regulation gives you the following rights, which you can exercise by writing to privacy@vault-os.fr:
- Access: obtain a copy of the data we hold about you.
- Rectification: have inaccurate data corrected.
- Erasure: request the deletion of your data.
- Restriction: ask for a processing operation to be frozen while a disagreement is resolved.
- Objection: object to a processing operation based on our legitimate interest.
- Portability: retrieve your data in a machine-readable format, to take it elsewhere.
- Withdrawal of consent: at any time, for the processing operations that depend on it — without calling into question what was done before.
We reply within one month. If we need to verify your identity before handling a sensitive request, we will tell you.
If you believe we have not responded properly, you can lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris CEDEX 07, France — www.cnil.fr.
8. How we protect your data
- Isolation per player. A security rule at the database level makes it technically impossible for one player to read another player's data. This rule is active on every table.
- Screenshots in a private space. Your original screenshots are not publicly accessible; only the cards you decide to share are.
- Encrypted communications. All communications between your browser and VAULT are encrypted.
- Traceability. Every administrative operation on an account is recorded with its author and its date.
No system is infallible. In the event of a data breach likely to result in a risk to your rights, we notify the CNIL within 72 hours and, if the risk is high, we inform you directly.
9. Cookies
VAULT uses no advertising cookie and no tracker. Your activity is never used for advertising purposes, and no data is transmitted to any ad network.
The only cookie set is the one that keeps you logged in to your account. It is strictly necessary for the service to work, and as such does not require your consent — which is why you see no cookie banner on this site.
Should we ever add an audience-measurement tool, this policy would be updated and, where required, a consent banner would be put in place.
10. Minimum age
VAULT is reserved for adults. We do not knowingly collect data about minors. If we learn that an account was created by a minor, it will be deleted.
11. Changes to this policy
We may update this policy, in particular when new features are introduced. Any substantial change will be notified to you by e-mail and at your next login, before it takes effect. The version date appears at the top of this page.
12. Contact us
DealMeIn — 60 rue François 1er, 75008 Paris, France