Privacy Policy

Who we are

PokeTracker is a free Pokémon GO collection tracking service operated by a private individual based in Denmark. The service is available at poketracker.qenarye.dk. For questions about this policy, contact us at poketracker@qenarye.dk.

What data we collect

When you create an account we collect:

• Username — chosen by you, publicly visible on your profile page.
• Email address — used for account verification and password resets. Never shown publicly.
• Password — stored as a one-way bcrypt hash. We cannot read your password.

When you use the app we also store:

• Pokémon collection data — which Pokémon you have marked as caught, shiny, for trade, or on your wishlist.
• Optional profile data — country, in-game region (Vivillon pattern), and Pokémon GO trainer code, if you choose to add them in Settings.
• Login timestamps — a record of when you logged in, used for the admin dashboard. No IP addresses or device information are stored.
• Share events — a count of how many times your public profile has been viewed via a share link, used for the admin dashboard.
• Email verification status — whether your email address has been confirmed.

How we use your data

• To provide and operate the PokeTracker service.
• To send transactional emails (email verification, password reset). We do not send marketing emails.
• To display your public profile page when you share a link.
• To show aggregate usage statistics on the admin dashboard (total users, logins, shares).

We do not sell your data, share it with advertisers, or use it for any purpose beyond operating the service.

Browser storage

PokeTracker uses localStorage (not cookies) to remember two preferences locally in your browser:

• Your chosen colour theme (light or dark).
• Whether shiny sprites are shown by default.

These values are stored only on your own device and are never sent to our servers. We do not use tracking cookies or analytics cookies.

Third-party services

• Railway (railway.app) — hosts the application and database. Your data is stored on Railway's PostgreSQL servers. See Railway's privacy policy.
• Resend (resend.com) — used to deliver transactional emails. Your email address is shared with Resend solely for the purpose of sending those emails. See Resend's privacy policy.
• PokéAPI (pokeapi.co) — provides Pokémon names and sprite URLs. No personal data is sent to PokéAPI; it is a read-only data source.

Data retention

Your account data is retained for as long as your account exists. You can permanently delete your account at any time from the Settings page. Deletion removes your username, email, hashed password, and all collection data from our database immediately and irreversibly.

Your rights (GDPR)

If you are located in the European Union or European Economic Area you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can correct your username or email from within the app.
• Right to erasure — you can delete your account and all associated data from Settings at any time.
• Right to restriction — you can ask us to stop processing your data while a dispute is resolved.
• Right to data portability — you can request your data in a portable format.
• Right to object — you can object to processing of your data at any time.

To exercise any right not already available through the app, contact us at poketracker@qenarye.dk. You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at datatilsynet.dk.

Children

PokeTracker is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we make material changes to this policy we will update the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.