What we keep
- Your email address and a password, to sign you in. Sign-in is run by Supabase Auth. We never see or store your password.
- What you enter: teams, team versions, battles, opponent previews, results, rank, notes, corrections. This is your work and it stays yours. Battle notes are private to your account: they never go into analytics, error reports or anything an administrator sees in aggregate.
- Feedback you send, with the page you sent it from, and any messages you and the site’s administrator write to each other about it. Only you and the administrator can read them.
- Product analytics: which screens are used and which actions are taken, under a random visitor id that we make up. No IP address, no email address and no name is ever stored in analytics.
- Broad categories about each visit, since September 2026: whether the device is a phone, tablet or desktop; the operating-system family (such as iOS or Android); the width of the browser window as one of five ranges, never the exact size; the country the request appeared to come from, as a two-letter code supplied by our hosting provider from the connection, which we never look up ourselves; and the website a visit came from, as its hostname only, never the page or anything after it. Visits recorded before then have none of these values and show as Unknown. The browser description these categories are read from is discarded and never stored.
What we do not do
- We do not sell or share your data, and we show no ads.
- We do not use third-party analytics or advertising trackers.
- We do not store IP addresses in analytics.
- We do not store the full description of your browser, your exact screen size, or the address of the page you came from. We do not fingerprint devices.
- We do not look at your battles unless you ask us to help with a problem.
Where it lives
Your account data is stored in a database hosted by Supabase, in rows only your account can read. A copy of your own data is also kept in your browser so the app works offline and syncs when you are back online. Nothing is shared between accounts.
Pokémon, item and type images are loaded from the Pokémon Showdown sprite host when images are turned on. Your browser contacts that host to fetch them.
Cookies and storage
We use cookies only to keep you signed in and to carry a short notice from one page to the next. Your theme choice and your offline copy live in your browser’s own storage. There are no advertising cookies.
Your controls
- Export everything from Settings, as a file you keep. Unknown information stays marked unknown in the file, never turned into a no.
- Delete your account from Settings. Deletion happens after a grace period of 30 days, during which you can cancel and nothing is lost. After that your account, teams, versions, battles, notes and preferences are erased, and so are the feedback you sent, every message you and the administrator wrote about it, and the administrator’s own notes on it.
- What stays after deletion: analytics events, with the link to you removed; and audit entries saying that a deletion happened, or that feedback was read or answered, with counts and no text. Feedback sent while signed out was never linked to an account, so it is not found or erased with one.
Age
You need to be 13 or older to create an account. We ask that question before we ask for anything else, and we do not ask for your date of birth.
Questions
Use Feedback inside the app. Some parts of this page, such as how long security records are kept and which regions we serve, are still being decided and will be added here when they are.