Privacy Policy

Last updated: April 30, 2026

1. Overview

PokeComp is a free fan project for competitive Pokemon Champions players. We take your privacy seriously and collect only the minimum data necessary to provide the service.

2. Data We Collect

Account Data

When you create an account, we store your email address through Supabase Auth. This is used solely for authentication. We do not share your email with third parties.

User-Created Data

Your roster, teams, matchup logs, and any notes you enter are stored in our database, linked to your account. This data is only accessible to you through Row Level Security (RLS) policies.

AI Usage Data

When you use AI features (draft analysis, cheatsheets), we log the request type, token counts, and timestamp for rate limiting and cost management. We do not store the full text of AI prompts or responses beyond the temporary analysis cache.

Analysis Cache

AI-generated analyses are cached for 24 hours (draft) or 7 days (cheatsheet) to reduce costs and improve response times. Cached data is keyed by team composition, not by user identity.

3. Third-Party Services

  • Supabase— Authentication and database hosting. Your data is stored in Supabase's infrastructure. See Supabase Privacy Policy.
  • Anthropic (Claude API)— AI analysis features send team composition data to Anthropic's API for processing. See Anthropic Privacy Policy.
  • Vercel — Application hosting. See Vercel Privacy Policy.
  • Ko-fi— Optional donations and supporter memberships are handled by Ko-fi. PokeComp does not process or store payment information. See Ko-fi Privacy Policy.
  • Slack/Discord (Incoming Webhooks)— Internal operational alerting. We may send system error logs (containing no user personal data) to these services for real-time monitoring.

4. Third-Party Data Sources

PokeComp aggregates publicly available competitive Pokemon data from the following community sources. We do not send your personal data to any of them; requests are made server-side using public endpoints.

  • PokeAPI— Base game data (species, moves, items, abilities). See pokeapi.co.
  • Pikalytics— Tournament-weighted usage statistics.
  • Smogon (pkmn project)— Usage stats and format metadata; MIT-licensed community data.
  • Limitless VGC— Tournament team listings and results via the Limitless public API.
  • Serebii— Champions-verified movepool and form references, fetched with a conservative rate limit.

5. Advertising

PokeComp displays privacy-first contextual advertising on public content pages (Pokedex, Meta, Moves, Items, Type Chart, Speed Tiers, Calculator) via EthicalAds. Ads are matched to page content, not to your identity or browsing history. EthicalAds does not use tracking cookies, does not profile users, and does not sell personal data.

Ko-fi supporters receive an ad-free experience. Ads also never appear on authenticated tools (Draft, Cheatsheet, Roster, Teams, Matches, Profile), the auth flow, or legal pages.

6. Data Security

All data is transmitted over HTTPS. User data is protected by Supabase Row Level Security (RLS), ensuring users can only access their own data. Authentication tokens use industry-standard JWT with ES256 signing.

7. Data Retention

Your account data and user-created content are retained as long as your account exists. AI usage logs are retained for operational purposes. If you delete your account, your user-created data will be removed.

8. Cookies

PokeComp uses localStorage for onboarding tour state and session management. We do not use tracking cookies or third-party analytics.

9. Your Rights

You can view, export, or delete your data at any time through the application. For data deletion requests or privacy questions, contact the developer via the project's GitHub repository.

10. Changes to This Policy

We may update this policy as the service evolves. Significant changes will be noted on this page with an updated date.