Privacy & Cookie Policy
Last updated August 2026.
Who we are
PocketPairings ("we", "us") provides tools for organising and following Pokémon TCG events. The data controller is José Pedro Valentim Oliveira, an individual operating PocketPairings from Belgium. For any privacy question, contact us at privacy@pocketpairings.dev.
What we collect
- Account — your name, email address, and a securely hashed password (or Discord account details if you sign in with Discord).
- Player profile — your Play! Pokémon Player ID, name, and birth year (used only to determine your age division).
- Event activity — registrations, the decklists you submit, pairings and results for events you take part in.
- Notifications — if you enable them, a web-push subscription for your browser/device.
- Organizers — for tournament organizers, league/store details and the data needed to operate their events.
- Technical — basic, aggregate usage such as page views; standard server logs.
How we use it & why
- To run your account and let you register, submit decklists, and follow events — to perform our service to you (contract).
- To show pairings, standings, and (after an event) published decklists — legitimate interest in running competitive events. You can turn off publishing your own lists in your profile settings; only the deck archetype is then shown, and the list itself stays with the organizer and the event's judges.
- To send transactional email (e.g. email verification, password resets, organizer setup) and, if enabled, pairing notifications — contract / your consent.
- To keep the service secure and prevent abuse — legitimate interest.
We do not sell your personal data.
Who we share data with
We use a small number of processors to run the service:
- Hetzner — our hosting and infrastructure provider.
- Resend — to deliver transactional email.
- Discord — only if you choose to sign in with Discord.
International transfers
Our hosting is in the EU. Some of our processors — such as Resend, Discord@if ($adsenseEnabled), and Google AdSense@endif — are based in the United States, so using those features involves transferring some personal data outside the European Economic Area. Where that happens, the transfer is protected by appropriate safeguards, primarily the European Commission's Standard Contractual Clauses. You can request more detail at privacy@pocketpairings.dev.
How long we keep it
We keep your account and event data for as long as your account is active or as needed to provide the service and keep event history. You can ask us to delete your account; published event results may be retained as a historical record.
Your rights
Subject to applicable law (including the GDPR for EU/EEA users), you can request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent where we rely on it. To exercise these, contact privacy@pocketpairings.dev. You also have the right to complain to your local data protection authority — in Belgium, the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), dataprotectionauthority.be.
Children
Pokémon events include Junior and Senior age divisions, so some participants are minors. Accounts and decklist submissions for minors should be created and managed with a parent or guardian's involvement, and where the law requires consent to process a child's data, that consent must be given by the holder of parental responsibility. If you believe a child has provided us data without appropriate consent, contact us and we will address it.
Changes
We may update this policy; we'll revise the date above when we do. Questions? privacy@pocketpairings.dev.
This policy is a starting template and should be reviewed by a qualified professional before launch.