FIVE ALARMPrivacy policy
Last updated November 6, 2026
What we collect
- Account: name, email, a password (stored only as a salted hash), and your second steps (passkeys, an authenticator, an optional mobile number).
- Events: what your organization enters: player names, busts, rebuys, add-ons, comps, tabs and payment methods. For a held card, only the name on the card and optionally its last 4 digits. Never card numbers, expiry dates or security codes.
- Security records: sign-ins, devices, approximate location from IP address, and changes to your account, kept so you and your organization can spot misuse.
- Billing: handled by PayPal; we keep the subscription status and the card type and last 4 that PayPal reports.
How we use it
Only to run the service: sign-in and security, your events, reports and standings, billing, and support. We don't sell personal information and don't use it for advertising.
Text messages and your phone number
Your mobile number is used only to send security codes when you sign in, confirm the number or reset your password. We never use it for marketing and never share or sell it. We keep a record of your consent (when and which version you agreed to). Reply STOP to any code text to stop them, HELP for help, or remove the number under Account → Account security.
Who processes data for us
Cloudflare (hosting and storage), Resend (email), Twilio (text messages) and PayPal (subscriptions) process data on our behalf, only to provide these services.
Keeping it safe
Everything travels over HTTPS. Sign-in requires a second step. Organizations only see their own data. Backups you download are encrypted.
Your choices
You can change your details and second steps on your Account page. Organization owners can export or delete their organization's data. To ask about or delete your personal data, email support@fivealarmpoker.com.
Children
Five Alarm is for adults running and staffing events; it isn't directed to children.