Privacy policy
Overshove is built privacy-first. Your poker data is yours: your venues, location and session history stay private unless you explicitly choose to share them. This page sets out who is responsible for your data, what we hold, why we hold it, and the control you keep.
Who controls your data?
Howcrofts Consulting Ltd operates Overshove and is the data controller for overshove.com and the Overshove app under UK data protection law. The company is registered in England and Wales under company number 11654047. Email support@overshove.com with any question about this policy or your personal data.
What personal data does Overshove collect?
Overshove collects the information needed to run your account: your email address, authentication records, and device and sync details. It also stores the poker information you choose to enter, such as sessions, bankroll figures, venues, notes, marked hands and study entries. If you join the beta or newsletter, we keep the details you submit with consent. Optional product analytics record a small number of events that show whether a feature is working. Overshove does not buy or sell personal data, publish your results without your explicit choice, or use your poker record or product behaviour to infer problem gambling, addiction, health status or vulnerability.
What information is required?
You need an email address and the authentication records created at sign-in to use a synced Overshove account. Without them, we cannot provide account access or sync your data across devices. You provide poker records only when you choose to log a session or use a related feature. The newsletter, sharing and social features, and persistent product analytics are all optional. You can use the core account without them.
Why does Overshove use your data?
We use your data only where UK GDPR gives us a lawful basis. Contract covers creating and running your account, saving the entries you make, syncing them across devices, exporting your data and providing account controls. Legitimate interests cover service security, abuse prevention and minimised diagnostics that keep the product reliable, balanced against your rights. Consent covers persistent product analytics, sharing and social features, newsletter sign-up and marketing email. You can withdraw consent at any time without changing the lawfulness of earlier processing. Legal obligation covers limited records that must be kept when paid plans begin, including tax and accounting records.
Which services handle your data?
Supabase handles account and app-data sync. Beta-access and newsletter forms pass through our server to Google Apps Script and a restricted Google Sheet. Sentry receives limited technical error reports so we can find crashes and protect the beta service. PostHog may receive optional product analytics only after you consent in Settings. These services have different account, deletion and retention controls. We review each relevant service when handling a rights request instead of claiming that one in-app action removes every provider copy. We do not share your data with advertisers or data brokers.
How long does Overshove keep your data?
We keep account and poker data while your account is active. When a valid deletion request is completed, data covered by the right to erasure is removed from the live Overshove account systems covered by the request. Connected services are reviewed separately because their controls differ. We may keep a limited payment, tax, suppression or privacy-request record where the law requires or permits it, and we explain that in the response. Overshove does not currently have a qualified production recovery backup, so we do not promise a backup overwrite timetable or a tested restore-and-re-erasure process that does not yet exist.
What are your UK GDPR rights?
You can ask to access, correct or erase your personal data, restrict how it is used, receive a portable copy, or object when we rely on legitimate interests. The app includes data export, and you can email support@overshove.com for any rights request. We normally respond within one month. If we reasonably doubt your identity, we may ask for only the reasonable and proportionate information needed to verify it before disclosing or erasing data. We extend or refuse a request only where the law allows, and we explain why. You can complain about our response to the Information Commissioner’s Office at ico.org.uk or to your local supervisory authority.
Can you object to how your data is used?
Yes. You can object to direct marketing at any time, and we will stop using your data for that purpose. You can also object, for reasons connected to your situation, when we rely on legitimate interests. We will stop that processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. Email support@overshove.com to object.
Does Overshove make automated decisions about you?
No. Overshove does not use solely automated processing to make decisions that have legal or similarly significant effects on you. Its calculations show statistics and prompts for you to interpret. They do not decide whether you can access gambling, credit, employment or another significant service. Overshove also does not infer problem gambling, addiction, health status or vulnerability.
How do you make a privacy complaint?
Email support@overshove.com. We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed if the investigation continues and explain the outcome. You can also complain to the Information Commissioner’s Office.
Does Overshove use cookies and analytics?
The app uses essential cookies and local storage to keep you signed in and support offline use. Limited technical error monitoring helps us diagnose crashes. Before a report is sent, URLs are reduced to their path and obvious email addresses and long number strings are removed. Persistent product analytics, including any PostHog identifier or event, stay off unless you allow analytics in Settings. Withdrawing consent stops new optional analytics collection. On the public website, Google Analytics and Microsoft Clarity stay off unless you accept analytics in the consent banner, and form values are not sent to them. See the cookie policy for the full detail. Overshove does not use advertising trackers.
Is Overshove for children?
No. Overshove is for adults aged 18 or over who also meet the legal gambling age where they live. We do not knowingly collect data from children. If we find that an account belongs to a child, we close the account and erase the data.
How will you know if this policy changes?
We will flag material changes in the app and update the date at the top of this page. Email support@overshove.com if you have a question about a change.