Privacy policy

About the service

Blackjack is a free simulator for entertainment and practice (basic strategy, card counting). You only play with virtual chips that have no monetary value: you cannot deposit money, you cannot win anything and chips cannot be exchanged. The service is not affiliated with any gambling operator and contains no advertising.

Real-money gambling is forbidden to minors and can be addictive. If gambling is becoming a problem for you or someone close to you, ask the support services in your country for help. In Italy, the Istituto Superiore di Sanità's national gambling helpline (800 55 88 22) is free and anonymous.

Data controller and contact

The data controller is the private individual who runs this website, on a personal, non-commercial basis. For any question about your data, write to: info@openblackjack.online

What data we process

Single player: no personal data leaves your device. Balance, settings and statistics stay in your browser (see "Browser storage").

Multiplayer: to create or join a room, the site creates an anonymous account (a random identifier, with no email or password) and stores the nickname you choose, your seat, bets, cards and last presence signal. Your nickname is visible to the other players in the room: if you prefer, do not use your real name.

Technical data: as with any website, the providers' servers receive your IP address and some browser information with every request, and record them in their logs to run and secure the service. The site uses no analytics, profiling or tracking tools.

Purposes and legal basis

Multiplayer data is used only to run the game you asked to play (room, turns, results): the legal basis is the performance of the service you requested (Article 6(1)(b) GDPR).

Technical logs are used to deliver the site, prevent abuse and keep it secure: the legal basis is the controller's legitimate interest (Article 6(1)(f) GDPR).

Service providers

Data is processed on behalf of the controller by these providers, acting as processors (Article 28 GDPR):

• Netlify, Inc. (United States): website hosting and delivery.
• Supabase: database, real-time updates and anonymous multiplayer accounts, with data stored in a data centre in the European Union.

Where data can be accessed by providers based outside the European Union, the transfer relies on the EU-US Data Privacy Framework adequacy decision, for US providers that participate in it, or on the European Commission's standard contractual clauses included in their data processing agreements.

How long we keep data

• Rooms and players: deleted when the room empties or, at the latest, within 48 hours of the last activity at the table.
• Anonymous multiplayer accounts: deleted automatically after 30 days of inactivity.
• Technical logs: kept by the providers for the limited period set by their services.
• Data in your browser: stays on your device until you delete it.

Browser storage (localStorage)

The site uses no cookies. It stores in your browser's localStorage only what it needs to work and to remember your choices: nothing is used to track you and, since these are technical tools, no consent is required (Article 122 of the Italian Privacy Code).

• bj:stats: game and table settings
• bj:lang: chosen language
• bj:name: last nickname used in multiplayer
• bj:coach-stats: Coach mode statistics
• bj:lobbyCodeHidden: preference to hide the room code
• blackjack-singleplayer-balance: single player chip balance
• sb-…-auth-token: anonymous multiplayer account session

You can delete this data at any time from your browser settings: the site will keep working with the default values.

Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Articles 15-22 GDPR). Since accounts are anonymous, please mention your nickname and room if you can. Write to: info@openblackjack.online

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it

Providing data is not mandatory: single player works without any personal data, while multiplayer requires a nickname.