Pokémon Apex ArenaPrivacy Policy
Short version: Pokémon Apex Arena is a free fan game. It has no ads and no tracking cookies, and it never sells or shares your data. It uses only cookieless, anonymous visit counts. It stores only what it needs to run your profile, the leaderboards and online battles, and you can delete your profile at any time from inside the game.
Who we are
Pokémon Apex Arena (“the game”, “we”) is a free, non-commercial fan project run by @clydejuniorscripts. You can contact us at [email protected] or with the feedback button after any battle.
What we collect and why
| Data | Why | Who can see it |
|---|---|---|
| Trainer name, avatar and any social handles you add | Your profile on leaderboards, lobbies and match screens | Everyone (public) |
| Battle results, teams you battled with, rating, XP, badges and online match history | Leaderboards, rankings and progression | Everyone (public summaries) |
| Discord user id and username, only if you choose “Continue with Discord” | Signing in to the same profile on any device | Only us |
| Login tokens and recovery code, stored only as one-way hashes | Keeping you signed in and letting you recover a guest profile | Nobody can read them, including us |
| A salted, one-way hash of your IP address | Rate limits that stop spam and cheating | Only us. We never store your raw IP address |
| Your country (from Cloudflare, country level only) | Showing a region on online lobbies so players can find nearby opponents | Players browsing lobbies |
| Your email address, only if you sign up for update emails on the home page | Emailing you about big updates, events, or if the site moves to a new address | Only us. Never shown, sold or shared, except with an email-sending service we may use to deliver the emails |
| Anonymous visit statistics: page views, referring site, country, device type and browser (Cloudflare Web Analytics, no cookies, no fingerprinting, no personal profile) | Knowing how many people visit and whether the game works well on phones and PCs | Only us, as totals |
| Feedback you send, plus basic battle details | Fixing bugs and improving the game | Only us |
Apart from the optional update emails, we do not collect your email address. We never collect your real name, contacts, location beyond country, or payment details. Discord sign-in asks only for the identify permission, so we cannot see your email, servers or messages.
Data on your device
Your login token, recovery code, settings and saved teams are kept in your browser's local storage. The game sets two short-lived, strictly necessary cookies during Discord sign-in, which expire within minutes. There are no tracking or advertising cookies, so no cookie banner is needed.
Services involved
- Cloudflare hosts the website, database and online servers, and processes requests to run the game. Its Web Analytics counts visits without cookies or cross-site tracking.
- Discord, only if you sign in with it. Their own privacy policy applies to your Discord account.
- Google Fonts and Pokémon Showdown serve fonts and trainer sprites. Your browser fetches these directly, so those services see your IP address the same way any website you visit does.
- Links to Ko-fi, YouTube, Discord and X only take you to those sites. We do not share data with them.
How long we keep it
- Your profile, results and match history stay until you delete your profile.
- Login sessions expire after 90 days without use.
- Rate-limit records expire after an hour or a day and are then cleaned up automatically.
- Feedback is kept until it has been read and acted on.
- Your newsletter email stays until you unsubscribe with the link in any update email, or ask us to remove it.
Your choices and rights
- Delete your profile: Profile → Delete profile. This permanently removes your profile, results, rating, match history, sign-ins and sessions.
- Unlink Discord: Profile → Linked accounts → Unlink.
- Sign out everywhere: Profile → Sign out everywhere else.
- Change or remove your name, avatar and social links at any time in your profile.
- To ask what we hold about you, or for anything else, email us. Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, delete or object to processing. We honour these requests for everyone.
Children
The game is not directed at children under 13, and we do not knowingly collect personal data from them. Guest play needs no personal information. Discord itself requires users to be at least 13 (or older where local law says so). If you believe a child has given us personal data, contact us and we will delete it.
Security
All traffic uses HTTPS. Secrets are stored only as hashes, and access to the servers is restricted. No system is perfect: if we ever learn of a breach that affects you, we will post a notice on the site.
Changes
If this policy changes, we will update the date at the top. For significant changes we will also post a notice in the game.