Privacy Policy

Effective date: July 25, 2026

pokechamp.gg ("us", "we", or "our") operates the pokechamp.gg website (the "Service").

This page describes what data we collect, why we collect it, who processes it on our behalf, how long we keep it, and how you can get rid of it. By using the Service you agree to the collection and use of information in accordance with this policy.

Most of the Service works without an account: the tier lists, leaderboards, database, Team Builder and Damage Calc are all usable without logging in, and none of them require you to tell us anything about yourself. Creating an account is what adds the data described in the next section.

Information We Collect

Account Information

If you create an account, we store the following. Nothing here is optional except where it says so:

What We Deliberately Do Not Collect

We collect as little as we can get away with, so the following are absent by design rather than by omission:

• No passwords. Login is by Google or by a one-time code emailed to you, so there is no password for us to store or for anyone to steal.
• No date of birth or age. See Children's Privacy below.
• No real names, profile pictures, or contact lists, including from Google login. Your display name is one you choose in-app.
• No payment information. The Service is free and takes no payments.
• No long-term IP logs. IP-derived values exist only in the short-lived rate-limit counters described above.
• No advertising or cross-site tracking profiles, and we do not sell or share personal information (see the CCPA section).

Usage Data

We collect information on how the Service is accessed and used ("Usage Data"). This Usage Data may include your device's Internet Protocol address (IP address), browser type and version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. This is collected whether or not you have an account, primarily through our analytics provider, and we do not connect it to your account.

Content You Publish

Teams and tier lists you save are private by default. If you choose to make one public, then it, your display name, and its vote total become visible to everyone, including on the Team Comps pages. Making it private again removes it from those pages. Share links you create are unlisted rather than secret: anyone holding the link can open a public item, and search engines are asked not to index those pages.

Cookies and Local Storage

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device.

The session cookie (strictly necessary). When you login, we set one cookie named pokechamp-session. It holds an encrypted, signed session token and nothing else: no email address, no name, no preferences. It is marked HttpOnly (unreadable by scripts), Secure (sent over HTTPS only) and SameSite=Lax, and it expires after 30 days or when you logout. It is required for logging in, so it is set only if you do; there is no way to be logged in without it.

Analytics cookies. Our analytics provider (see Service Providers below) uses cookies to distinguish visits and visitors. Analytics runs by default, and you can opt out at any time using the link below. The Service remains fully usable either way, and you can also instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Your choice is remembered in this browser: opt out of analytics

Local storage. The Service uses your browser's local storage to remember preferences and work in progress on your own device: your preferred battle format, whether you read stats in Champions or Classic form, the team open in the Team Builder, the list open in a tier list maker, and the state of the Damage Calc. This data stays in your browser and is not transmitted to us. If you are logged in, your display preferences are also saved to your account so they follow you between devices.

How We Use Data

• To log you in and keep you logged in
• To store and display the teams, tier lists and votes you choose to save
• To show your display name (and social links, if you added them) on content you publish
• To rank public content on the Team Comps pages
• To protect the Service from abuse, including the login rate limits and bot protection
• To provide and maintain the Service, monitor its usage, and detect, prevent and address technical issues
• To reply to you if you contact us

We do not use your data for advertising profiles, we do not sell it, and we do not send marketing email. The only email we send you is a login code you asked for.

Service Providers

We use the following third parties to run the Service. They process data on our behalf, only to perform these tasks, and are obligated not to use it for anything else:

• Cloudflare - website hosting and content delivery; the database that stores your account, content and sessions; the service that sends your login code emails; and the bot-protection widget on the login form. See the Cloudflare Privacy Policy.
• Google - "Sign in with Google", if you use it, and Google Analytics. See the Google Privacy & Terms page.
• Zoho - the mailbox behind our contact addresses, so anything you email us is stored there. See the Zoho Privacy Policy.

Pokemon sprites and images are served from our own storage. The Service loads no third-party advertising or social-media scripts.

How Long We Keep It

• Account data, saved content and votes: until you delete them, or until you delete your account.
• Sessions: 30 days from last use. Logging out deletes that session immediately; "Logout Everywhere" deletes all of them.
• Login codes: valid for 10 minutes, single use, and the records are deleted by a cleanup job that runs at least twice a day.
• Rate-limit counters: the same cleanup job deletes them; none survive more than a couple of days.
• Usage Data is retained by our analytics provider under its own retention settings.

Your Rights and How to Use Them

Deleting your account is self-serve and immediate. Go to your account page and use Delete Account. It removes your account row and everything attached to it: login methods, sessions, social links, saved teams and tier lists, share links, any unused login code records, and every vote you cast. It is not a flag or a queue, and there is nothing to restore afterwards, so please export anything you want to keep first (the Team Builder can export a team as text).

One exception, stated plainly: the short-lived anti-abuse counters described above are not cleared on request, because clearing them would make deleting an account a way to reset the login email limit that protects the Service from bots. They hold a counter, an email address and a non-reversible hash of an IP address, they are never used for anything but rate limiting, and they are deleted automatically within a couple of days.

You can also change your display name, edit or delete individual teams and tier lists, make anything public or private again, disconnect a login method (as long as one remains), and logout of every device, all from your account page.

For anything you cannot do yourself, including a copy of your data or a question about this policy, email privacy@pokechamp.gg. Depending on where you live you may have rights to access, correct, delete, or receive a portable copy of your personal information, and to object to or restrict certain processing; we honor those requests regardless of where you live. We will ask you to send the request from the address on the account, since that is the only way we can verify it belongs to you.

Transfer of Data

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

The Service is operated from the United States, and our providers operate globally distributed infrastructure. If you are located outside the United States and choose to use the Service, please note that your data is processed in the United States and elsewhere. Your use of the Service represents your agreement to that transfer.

Disclosure of Data

Legal Requirements

pokechamp.gg may disclose your data in the good faith belief that such action is necessary:

• To comply with a legal obligation
• To protect and defend the rights or property of pokechamp.gg
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

Security of Data

The measures that matter most here are structural: there are no passwords to leak, session tokens are stored only as hashes so a copy of our database yields nothing you could login with, emailed login codes are stored as keyed hashes and die after 10 minutes or five wrong guesses, and the session cookie is encrypted, signed, and unreadable by scripts. Traffic to the Service is served over HTTPS.

That said, no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us, including social links that other users add to their own profiles. If you click a third party link you will be directed to that third party's site, and we strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third party sites or services.

Children's Privacy

The Service is intended for a general audience and is not directed to children under the age of 13, and our Terms of Service require users to be 13 or older. We do not ask for anyone's age and we do not knowingly collect personally identifiable information from anyone under the age of 13. If we become aware that we have collected "personal information", as defined by the United States Children's Online Privacy Protection Act ("COPPA"), from a child under the age of 13 without legally valid parental consent, we will take reasonable steps to delete it as soon as possible. If you have reason to believe that a child under the age of 13 has provided personal information to us, please contact us at privacy@pokechamp.gg and we will endeavor to delete that information and close the account. We also comply with other age restrictions and requirements in accordance with applicable local laws.

For California Residents: CCPA Information

This Privacy Notice for California Residents supplements the information contained elsewhere in this Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA), and any terms defined in the CCPA have the same meaning when used in this notice.

Information We Collect

Our website may have collected the following categories of personal information from its consumers within the last twelve (12) months:

The sources are you (what you type into the Service) and your device and browser (Usage Data). Personal information does not include publicly available information from government records, deidentified or aggregated consumer information, or information excluded from the CCPA's scope.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

• To provide, support, and develop our website, including your account and the content you save
• To help maintain the safety, security, and integrity of our website, databases, and other technology assets
• For testing, research, analysis, and product development, including to develop and improve our website
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations
• As described to you when collecting your personal information or as otherwise set forth in the CCPA

Sales of Personal Information

We do not sell or share your personal information as those terms are defined by the CCPA, and we have not done so in the preceding twelve (12) months. If that ever changes, we will update this policy and provide the required notice and opt-out mechanisms before doing so.

Rights and Choices

The CCPA provides consumers located in the State of California with certain rights regarding their personal information. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months, including:

• The categories of personal information we collected about you
• The categories of sources for the personal information we collected about you
• Our business or commercial purpose for collecting that personal information
• The categories of third parties with whom we share that personal information
• The specific pieces of personal information we collected about you (also called a data portability request)

You also have the right to request that we delete personal information we have collected from you, subject to certain exceptions. If you have an account, Delete Account on your account page does this immediately and in full, without needing to contact us.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by emailing privacy@pokechamp.gg.

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. If you have an account, sending the request from the email address on that account is what allows us to verify it. If you do not have an account, we hold no personal information tied to your identity beyond Usage Data we cannot connect to you, so there may be nothing for us to return. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services
• Charge you different prices or rates for goods or services, including through granting discounts or imposing penalties
• Provide you a different level or quality of goods or services
• Suggest that you may receive a different price or rate for goods or services or a different level of quality of goods or services

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "effective date" at the top. If a change materially affects how we handle account data, we will say so on the page rather than leaving you to spot the diff.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

Privacy, data, and deletion requests: privacy@pokechamp.gg

Anything else: hello@pokechamp.gg