Privacy & Cookie Policy

Who we are

PocketPairings ("we", "us") provides tools for organising and following Pokémon TCG events. The data controller is [legal entity name], [address]. For any privacy question, contact us at [privacy@yourdomain].

What we collect

• Account — your name, email address, and a securely hashed password (or Discord account details if you sign in with Discord).
• Player profile — your Play! Pokémon Player ID, name, and birth year (used only to determine your age division).
• Event activity — registrations, the decklists you submit, pairings and results for events you take part in.
• Notifications — if you enable them, a web-push subscription for your browser/device.
• Organizers — for tournament organizers, league/store details and the data needed to operate their events.
• Technical — basic, aggregate usage such as page views; standard server logs.

How we use it & why

• To run your account and let you register, submit decklists, and follow events — to perform our service to you (contract).
• To show pairings, standings, and (after an event) published decklists — legitimate interest in running competitive events.
• To send transactional email (e.g. email verification, password resets, organizer setup) and, if enabled, pairing notifications — contract / your consent.
• To keep the service secure and prevent abuse — legitimate interest.

We do not sell your personal data.

Cookies

Essential cookies keep you signed in and protect forms (session and CSRF cookies). The site can't function without them, so they don't require consent.

Advertising cookies — when advertising is enabled, we use Google AdSense, which sets cookies to show and measure ads. These load only after you accept in the cookie banner. Choosing "Essential only" means no advertising cookies are set. You can change your mind any time by clearing the cookie_consent cookie in your browser.

Who we share data with

We use a small number of processors to run the service:

• Hosting — our infrastructure provider.
• Resend — to deliver transactional email.
• Discord — only if you choose to sign in with Discord.
• Google AdSense — only after you consent to advertising cookies.

How long we keep it

We keep your account and event data for as long as your account is active or as needed to provide the service and keep event history. You can ask us to delete your account; published event results may be retained as a historical record.

Your rights

Subject to applicable law (including the GDPR for EU/EEA users), you can request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent where we rely on it. To exercise these, contact [privacy@yourdomain]. You also have the right to complain to your local data protection authority.

Children

Pokémon events include Junior and Senior age divisions, so some participants are minors. Accounts and decklist submissions for minors should be created and managed with a parent or guardian's involvement. If you believe a child has provided us data without appropriate consent, contact us and we will address it. [Confirm your jurisdiction's specific requirements for processing minors' data.]

Changes

We may update this policy; we'll revise the date above when we do. Questions? [privacy@yourdomain].