Privacy Policy

Last updated : November 1, 2026

PokeTracker respects your privacy. This policy explains how we collect, use, and protect your personal data.

1. Data Collected

We collect the following data:

**With an account (via Clerk):**
- Email address
- Username
- Unique identifier

**In our database (hosted on our own server):**
- List of caught shiny Pokemon (IDs)
- Owned Pokemon games
- Custom display name
- Language preference

**In guest mode (localStorage):**
- List of shiny Pokemon (stored locally in your browser)
- Language preference

2. Use of Data

We use your data to:
- Allow you to track your shiny Pokemon collection
- Synchronize your data across your devices (if logged in)
- Personalize your experience (language, preferences)
- Improve our service

3. Legal Basis

The processing of your data is based on:
- **Consent**: You accept our terms when creating an account
- **Legitimate interest**: Providing and improving our service
- **Contract execution**: Necessary to provide the service

4. Data Sharing

We never sell your data. We only share with:

**Technical service providers:**
- **Clerk** (USA): Authentication and account management
- **OVH** (French company): server hosting and storage of your data
- **Vercel** (USA): temporary redirection from the site's former address (vercel.app)

These services are GDPR compliant and protect your data.

5. Data Retention

- **Account data**: Retained as long as your account exists
- **After deletion**: Immediate and permanent deletion
- **Security logs**: 30 days maximum

6. Your Rights

Under GDPR, you have the following rights:

- **Right of access**: View your data
- **Right to rectification**: Modify your data
- **Right to erasure**: Delete your account and all your data
- **Right to data portability**: Export your data ("Export My Data" button)
- **Right to object**: Refuse certain processing
- **Right to restriction**: Limit the use of your data

To exercise these rights, contact us via the contact form available in the site footer.

7. Security

We implement appropriate security measures:
- Data encryption in transit (HTTPS)
- Secure authentication (Clerk)
- Database on a private server, not directly reachable from the Internet
- Restricted data access

8. Cookies

We use essential cookies for:
- Maintaining your login session
- Saving your preferences (language)

You can refuse cookies, but some features requiring login will not be available.

9. International Transfers

Your data is stored on a server located in Europe, rented from OVH (a French company). Some authentication data is processed by Clerk (United States). These transfers are secure and comply with the GDPR.

10. Changes

We may modify this policy. Important changes will be notified to you by email or via the application.

11. Contact

For any questions regarding your personal data:

**Contact**: Use the contact form in the footer
**Responsible**: Xalarian (PokeTracker)
**Response time**: 30 days maximum