Privacy policy

Who we are

Working Title ("we") is a small tool that helps Pokémon GO players decide which Pokémon to power up. Contact: privacy@example.com.

What we collect, and why

• Email address: to create your account, verify it's yours, and send password resets. Legal basis: performing our contract with you.
• Password: stored only as an argon2id hash. We can't see it.
• Your collection: the Pokémon you add (species, CP, level, IVs, moves), saved automatically, plus any progress checkpoints you log.

No name, no location, no analytics trackers, no advertising identifiers, no data sold or shared for marketing, ever.

Cookies

One session cookie, used only to keep you signed in. It's strictly necessary for the service, so no tracking cookies exist.

Where your data lives

Our servers and database are hosted in the UK/EU. Two companies process data on our behalf: our hosting provider (runs the servers) and Resend (delivers verification and password-reset emails, so they briefly handle your email address).

How long we keep it

• Accounts never verified are deleted automatically after 7 days.
• Accounts inactive for 24 months get a warning email; at 25 months the account and everything in it is deleted.
• When you delete your account, everything is deleted immediately and permanently. No grace period, no backups kept beyond our host's standard short-term database backups.

Your rights

Both of these are self-service, no email required:

• Get your data: the account menu's "Export my data" downloads everything we hold about you as a JSON file.
• Delete everything: the account menu's "Delete account" removes your account and all saved data immediately.

You also have the right to correct inaccurate data and to complain to the Information Commissioner's Office (UK) or your local data protection authority.

Age

This service is for people aged 13 and over. We don't knowingly hold data about anyone younger.

If something goes wrong

If a data breach affects you, we'll tell you and the ICO without undue delay, as the law requires.

Changes

If this policy changes materially, we'll email account holders before the change takes effect.