Privacy Policy

1. Identity and Contact Details of the Controller

The controller of your personal data is RangerPro, operated at the domain rangerpro.fr. For any questions regarding data processing, contact us at admin@rangerpro.fr.

2. Data We Collect

We collect and process the following personal data:

• Email address — used for authentication (PIN login), account identification, and service communications.
• Custom poker ranges — user-created range data stored in your account.
• Subscription data — billing status, plan type, and payment identifiers managed through Stripe.
• Session data — temporary cookies for authentication and language preferences.

We never collect or store credit card numbers, bank details, or other payment credentials. All payment processing is handled entirely by Stripe.

3. Purpose of Data Processing

• Providing and operating the RangerPro service (authentication, range storage, subscription management).
• Sending transactional emails (login PIN codes, contact form replies).
• Maintaining service security (brute-force protection, rate limiting).
• Improving the service based on aggregated, anonymized usage patterns.

4. Legal Basis for Processing

• Contract performance — processing necessary to provide the service you subscribed to (Art. 6(1)(b) GDPR).
• Legitimate interest — service security, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).
• Legal obligation — compliance with applicable laws and regulations (Art. 6(1)(c) GDPR).

5. Data Retention

Your personal data is retained for the duration of your account. If you delete your account, all personal data and custom ranges are permanently deleted within 30 days. Subscription records may be retained for up to 3 years for accounting and legal compliance purposes.

6. Third-Party Data Sharing

We do not sell your personal data. Data is shared only with: Stripe (payment processing), PostHog (analytics, EU servers, only with your consent), and email delivery services (transactional emails only). These processors act on our instructions and are bound by data processing agreements. We do not transfer personal data outside the European Economic Area.

7. Cookies & Consent

RangerPro uses essential cookies required for authentication and session management, plus a consent preferences cookie. Analytics cookies (PostHog) are only activated if you grant consent via the cookie banner. You can change your preferences at any time via the 'Cookie Preferences' button in the footer or your Account Settings page.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data, or export it directly from your Account Settings.
• Right to rectification — correct inaccurate personal data.
• Right to erasure — delete your account and all data from your Account Settings.
• Right to restriction — restrict processing in certain circumstances.
• Right to data portability — export your data as JSON from your Account Settings.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — revoke analytics consent at any time via Cookie Preferences.

To exercise any of these rights, contact us at admin@rangerpro.fr, or use the self-service options in your Account Settings. You also have the right to lodge a complaint with your local data protection authority (in France: CNIL).

9. Security Measures

We implement appropriate technical and organizational measures to protect your data, including: passwordless authentication with time-limited PIN codes, user-scoped data isolation (custom ranges are private to your account), brute-force protection on login attempts, rate limiting on sensitive actions, HTTPS encryption for all communications, and CSRF protection on all forms.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via the service. Continued use of RangerPro after changes constitutes acceptance of the updated policy.