Privacy Policy

Last updated: July 2026

This Privacy Policy describes how Specter GTO ("Specter," "we," "us," or "our"), operated by Specter GTO LLC, collects, uses, and shares information when you use our website at spectergto.com and our application at app.spectergto.com (together, the "Service"). By using the Service, you agree to the practices described here.

1. Information we collect

We collect the following categories of information:

• Account information — when you create an account, we collect the information needed to set it up and authenticate you, primarily your email address. If you sign in with Google, we receive the email address associated with your Google account through Google Sign-In.
• Billing information — paid subscriptions are processed by our payment provider, Stripe. Stripe handles your payment-card details; we do not store full payment-card numbers ourselves. We retain billing-related records such as your subscription tier and status, customer and subscription identifiers, usage allowances, and billing-period dates.
• Usage and game-state data — to serve a decision, the Service works from abstract game state (such as your cards, positions, and stacks) and records a log of the decisions served, which we use to operate, secure, and improve the Service. This decision log does not contain images of your screen (diagnostic reports you choose to send are separate — see the next item).
• Diagnostic reports you send — if you use "Report a problem," we collect the diagnostic snapshot you submit: a short recent window of abstract game state (your cards, positions, stacks, bets, pot, the board, and the decisions Specter showed you), a short note you write describing the problem, small images of the board-card regions of your screen, which help us debug card-reading issues, and technical processing information (internal status and error messages). A diagnostic report is sent only when you choose to send one, and is linked to your account. It does not include any video or full-screen screenshot of your screen; other players appear only by their seat position and their visible table information (their stacks, bets, and cards), and the small images it includes are of the community board cards and of the stack-count regions of the table — not of any player personally; as with the raw text described above, these regions may incidentally include nearby on-screen text such as a username. We do not have a feature that reads players' names. However, because a report includes the raw text read from the on-screen regions you set up, that text could incidentally include other information displayed near those regions — for example, a username shown next to a player's stack.
• Device and log data — like most online services, we and our infrastructure providers automatically receive technical data such as IP address, browser type, and request logs, which we use to operate and secure the Service.

2. How screen sharing is processed

Specter reads your table using your browser's screen-share feature. This processing happens within your own browser: optical character recognition (OCR) runs locally on your device, and only the abstract game state needed to look up a pre-solved decision (for example, your hand and the board) is sent to our servers. In normal operation, we do not receive or store any image or video of your screen. The one exception is if you choose to send us a diagnostic report using "Report a problem" (see Sections 1 and 6): that report includes small images of the board-card and stack-count regions of your screen, but it never includes a full-screen image or a video of your screen. During screen-map setup, any screenshot used to position the reading regions is created and stored only on your own device, in your browser's local storage, and is never uploaded or transmitted. Your decision history and session summaries are also stored locally in your browser.

3. How we use information

We use information to: provide and operate the Service and serve GTO decisions; create and authenticate accounts; process subscriptions, payments, and refunds; provide customer support; maintain security and prevent abuse; and meet legal, tax, and accounting obligations. We do not sell your personal information, and we do not use your game-state data to build or train any AI model — every decision comes from a pre-solved lookup.

4. Third-party services (sub-processors)

We rely on the following third-party providers to operate the Service. Each processes information only as needed to provide its function, under its own terms and privacy policy:

• Supabase — authentication, database, and backend infrastructure (stores account, billing-mapping, and usage data).
• Stripe — payment processing and subscription management.
• Railway — hosting for our application server (authentication and decision endpoints).
• Cloudflare — website and application hosting, content delivery, and security.
• Resend — delivery of transactional email (such as confirmation and password-reset messages).
• Google — Google Sign-In (for optional Google authentication) and Google Fonts (loaded on our pages). When these load, Google may receive technical request data such as your IP address.

5. Cookies

We use cookies that are necessary to keep you signed in and maintain your session, including a secure, http-only session cookie set on our application domain. Google Sign-In may set its own cookies when you use it. We do not currently run third-party advertising or behavioral-tracking analytics. We do not sell your personal information.

6. Data retention

We retain account and billing records for as long as your account is active and afterward as needed for legal, tax, and accounting purposes. Decision-log records are retained to operate and improve the Service. Screen-map screenshots and decision history stored in your browser's local storage remain on your device until you clear them; they are not held by us. Diagnostic reports you send through "Report a problem" are retained for 90 days and then automatically deleted.

7. Data security

We use reasonable technical and organizational measures to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal information. To exercise these rights, email hello@spectergto.com from the email address on your account.

Account deletion. To delete your account, email us at hello@spectergto.com from your account address and ask us to delete it. When we delete an account, we cancel any active subscription and remove your account and associated records, subject to information we are required to retain for legal, tax, or accounting purposes.

Diagnostic reports. To request deletion of a report you submitted, contact us at hello@spectergto.com.

9. International users and data transfers

We are based in the United States, and our providers process and store information in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in the United States.

10. Children's privacy

The Service is intended only for adults who are at least 18 years old (or the age of majority in their jurisdiction, if higher). It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email.

12. Contact

Questions about this policy or your information? Email hello@spectergto.com.