Privacy Policy

pkmn is a free fan-made game run by one person as a hobby. That person decides how your data is used and is the one you deal with for anything in this policy. Write to [email protected].

• Your username, your email address and a hash of your password. We never store the password itself.
• Your date of birth, to check that you are old enough to play. We are adding this to sign-up, and players who joined earlier will be asked once.
• Your characters, Pokémon, items, progress and records of play, such as battles.
• The chat messages you send in the game.
• The bug reports you send, with anything attached to them, such as screenshots or logs.
• Your IP address, in security logs, when you sign in or use the game.

• To run your account and the game, and to save your progress.
• To send account email, like confirming your address or resetting a password.
• To keep the game fair and safe: stopping abuse, cheating and attacks.
• To look into reports about players, using the chat logs.
• To find and fix bugs.

We use your data only because we need it to provide the game you signed up for, to keep it safe, or because the law requires it. We don't sell it, we don't show ads, and we don't build profiles of you for anyone else.

If we ever send news by email, it will only go to players who ask for it, and every message will have a link to stop it.

Your username, your characters and what they do in the shared world are visible to other players. So are the chat messages you send, to everyone in that channel. Your email address and date of birth are never shown to anyone.

We run the servers ourselves. Two services help, and they only handle what they need for their part:

• Cloudflare sits in front of the website and the game servers. It carries the traffic and blocks attacks, so it sees IP addresses and requests.
• Resend delivers our email, so it sees your email address and the messages we send you.

These companies may process data in countries other than yours. We don't share your data with anyone else unless the law requires it.

This website uses only what it needs to work:

• One first-party cookie that keeps you signed in and protects forms from forged requests.
• Your light or dark theme choice, saved in your browser's local storage.

Cloudflare may set a cookie of its own to tell people apart from bots. We use no analytics, no ads and no tracking cookies, so there is nothing to agree to.

• Account and game data: until you delete your account.
• Chat messages: 90 days, so we can look into reports.
• Security logs with IP addresses: 30 days.
• Bug reports: until the bug is dealt with.

You can ask us for a copy of your data, to correct it, or to delete your account and the data that goes with it. You can also object to how we use it. Until the account page can do these things for you, write to [email protected] from the email address on your account. We answer within 30 days.

When we delete an account, we may keep a few records for a short time where we need them: for example, a moderation record of a ban, or security logs until they expire. Copies in backups disappear as the backups are replaced.

If you think we got something wrong, please tell us first. You can also complain to the data protection authority where you live.

pkmn is not for children under 13. If we learn that an account belongs to someone younger, we delete it. Parents who think this has happened can write to [email protected].

Traffic to the site and the game is encrypted, passwords are stored only as hashes, and access to the servers is limited to the operator. No system is perfectly secure. If something goes wrong that affects your data, we will tell you.

When this policy changes, the date at the top changes too. If a change matters, we will tell you in the game or by email.