Security

Last updated: September 18, 2026

Architecture: local-first, minimal surface

• All gameplay, coaching and solving runs on your machine. There is no server to breach and no account credentials to steal, because neither exists.
• The application makes exactly one kind of network call: on launch it fetches a single static file, optimapoker.com/updates/latest.json, to see whether a newer version exists. If one does, a dismissible pill appears and nothing is downloaded until you click it. No session data, hand history, statistic, telemetry or identifier is ever transmitted.
• Updates are cryptographically signed. Each update artifact is verified against a public key compiled into the application before it is installed; an unsigned or tampered artifact is rejected. The signing key lives offline, never in the source repository.
• If the update check fails — offline, firewalled, or blocked by policy — the app silently carries on. Blocking it costs you nothing but updates.
• It requests no elevated privileges beyond a standard user install and touches only its own application-data folders.
• Built in Rust — a memory-safe systems language — with the interface in an isolated webview.

Downloads

• The only legitimate download source is optimapoker.com. Installers obtained anywhere else should be treated as untrusted.
• During early access the installer is not yet code-signed, so Windows SmartScreen may show a notice ("Windows protected your PC" → More info → Run anyway). Code signing is planned before general availability, which removes the notice and lets you verify the publisher.

Website

• Served over HTTPS via Cloudflare's global network; static content only — no login, no database, no third-party scripts.

Reporting a vulnerability

If you believe you've found a security issue in the application or this site, please email support@optimapoker.com with details. We take reports seriously and will respond promptly. Please practice responsible disclosure — give us a reasonable window to fix an issue before publishing it.