Privacy Policy
Effective date: October 16, 2026
1. Who we are
Range Lab is operated by Mobius Poker LLC, a New York limited liability company with its principal place of business in California (“Mobius”, “we”, “us”), which also operates MobiusGTO. We are the data controller for the personal data described in this policy.
Contact: privacy@mobiusgto.com
Range Lab is a preflop range builder and trainer for adults (18+). It does not offer real-money gambling. Range Lab uses your MobiusGTO account; the MobiusGTO Privacy Policy covers data you create in MobiusGTO itself.
2. What we collect
Account data (via our authentication provider, Clerk): your email address, the display name you choose, and authentication identifiers.
Your solutions and ranges: the solutions you create or copy, their table settings, the spots and action menus you build, and the ranges you paint or paste.
Training data: your training sessions, the decisions you make in them, grading results, and the statistics derived from them.
Preferences: display and training settings, such as hotkeys and action colors.
Billing state: your plan and subscription status, as reported by Paddle. We do not receive your full card details.
Technical data: IP address, browser and device information, and request logs, processed by our infrastructure provider (Cloudflare) to operate and secure the service.
Support communications: messages you send us by email.
3. How we use your data
Your individual data is processed to provide and operate the service: your library, training sessions, statistics, account management, and support. We do not sell personal data. We disclose personal data only as described in Section 5. Your custom solutions and ranges are private to your account.
Aggregated, anonymized data (combined across many users, with no link to any individual) is used to understand how Range Lab is used and to improve its training and included solutions.
Service operations: sending transactional emails (via Resend), security, fraud and abuse prevention, and legal compliance.
4. Legal bases (GDPR)
Where the GDPR applies, we process personal data on these bases: performance of our contract with you (providing the service); our legitimate interests (aggregate product research, security, abuse prevention); consent, where we ask for it; and legal obligation.
5. Who we share data with
We share personal data only with the service providers that run Range Lab:
- Clerk (authentication)
- Cloudflare (hosting, infrastructure, security)
- Neon (database hosting)
- Resend (transactional email delivery)
- Paddle (payments; Paddle is the merchant of record and an independent controller of your checkout and payment data under its own privacy policy)
We do not sell personal data. We may disclose data if required by law.
6. Retention and deletion
We keep your data while your account is active. Solutions you remove from your library are retired, not erased, until your account is deleted. If you request account deletion, we delete your personal data, including your Range Lab solutions, ranges, training sessions, and statistics, within 30 days, except where law requires longer retention. Because Range Lab and MobiusGTO share one account, deleting it removes your data from both. Aggregated, anonymized statistics already computed from data across many users are retained; they contain no link to you. Financial records are retained by Paddle under its own obligations.
7. Your rights
You can access and update your account data in the app. You may request access to, correction of, deletion of, or a copy of your personal data, or object to processing, by emailing privacy@mobiusgto.com. We honor these rights for all users regardless of location, including rights under the GDPR and equivalent California rights. If you are in the EEA or UK, you may also lodge a complaint with your supervisory authority.
8. International transfers
Range Lab is operated from the United States and data is hosted in the United States. If you use the service from outside the US, your data is transferred to the US. Where the GDPR applies to a transfer, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses with our processors.
9. Cookies and analytics
We use functional cookies for sign-in, and your browser stores your settings and any training decisions not yet sent. We run no advertising or behavioral trackers, which is why Range Lab shows no cookie banner.
10. Children
Range Lab is for adults 18 and older. We do not knowingly collect data from anyone under 18.
11. Security
Data is encrypted in transit, hosted with the providers listed above, and access is restricted. No system is perfectly secure; we notify affected users of any breach as required by law.
12. Changes
We will post changes to this policy on this page and update the effective date. For material changes, we will notify active users by email.
13. Contact
privacy@mobiusgto.com
Mobius Poker LLC, c/o Northwest Registered Agent, Inc., 2108 N St Ste N, Sacramento, CA 95816, USA