Legal
Privacy Policy
This policy explains what information HandLab processes, why it is used, and the choices available to visitors and account holders.
Last updated November 6, 2026
Information we process
When you create an account, HandLab receives account identifiers such as your email address, username, and authentication provider. Authentication is provided through Amazon Cognito. If you use Google sign-in, Google and Cognito process the sign-in according to their own terms and privacy policies.
Hand histories, titles, questions, comments, study-page membership, votes, friendships, and profile details are stored to provide the features you choose to use. A hand's visibility setting controls whether it is public, private, or shared with selected users.
Analytics and service operation
HandLab records limited first-party usage events such as page paths, import outcomes, replay interactions, referral host, campaign parameters, session identifiers, and an account identifier when signed in. We use this information to understand feature reliability, diagnose parsing problems, prevent abuse, and improve the site. We do not sell personal information.
Our infrastructure providers may process IP addresses, browser details, request logs, and security events as needed to deliver and protect the service. These records may be retained for operational, fraud-prevention, and legal purposes.
Advertising and cookies
HandLab may use Google AdSense on public pages with substantial publisher content. Google and its partners may use cookies, web beacons, IP addresses, or similar identifiers to serve, measure, and limit ads. Depending on your location and consent choices, ads may be personalized or non-personalized.
Learn more about how Google uses information from partner sites. Where required, a consent message provides choices before advertising cookies are used. Browser settings and ad-industry controls may provide additional cookie choices.
Sharing, retention, and security
We share data with service providers only as needed to host the application, authenticate users, send service email, provide advertising, monitor reliability, or comply with law. Public hands, public profiles, public study pages, and comments are visible to other visitors and may be indexed by search engines.
We retain information while an account or feature requires it and may retain backups or security records for a limited period. Reasonable technical and organizational safeguards are used, but no internet service can guarantee absolute security.
Your choices and contact
You can choose hand visibility when importing or publishing and can update available account settings. To ask about access, correction, deletion, or another privacy matter, use the contact form and identify the request as a privacy question.