1. Who is responsible
For project-controlled processing on pokemondefinitive.com, the independent Operator is the relevant data controller to the extent that applicable privacy law uses that concept. Privacy questions and rights requests may be sent to lega@pokemondefinitive.com.
2. Information the site may process
Device-local preferences. If you choose to enable functional storage, the browser may store Atlas discoveries, Pokédex favorites/caught status and related preferences on your device. This data is intended to stay in your browser and is not required to create an account.
Technical request data. Hosting, reverse-proxy or security infrastructure may process ordinary technical data such as IP address, request time, URL, response status, user agent and security events. Such data may be retained for a limited period for reliability, abuse prevention and troubleshooting.
Messages you send. If you email us, we receive the information you choose to include and use it to respond and keep an appropriate record.
Donation information. Payments are processed by PayPal or another identified payment provider. We do not receive your full card/bank credentials. The payment provider may make transaction information such as donor identity, email, amount, currency and transaction reference visible to the recipient as part of normal payment processing.
3. Why information is processed
We process information where needed to operate and secure the site, remember optional features you request, answer messages, maintain release/security records, comply with legal obligations and administer voluntary payments. We do not intentionally use project data for behavioural advertising.
4. Legal bases
Where a legal basis is required, it may include: your consent for optional device storage; legitimate interests in running, securing and debugging a small public website where those interests do not override your rights; compliance with legal obligations; and steps necessary to handle a request you initiate.
5. Cookies and local storage
The current project does not intentionally use advertising or behavioural-tracking cookies. Functional browser storage is optional and is used for features such as Atlas discovery progress and My Pokédex. You can choose “Essential only” and use the public site without persistent progress.
Your browser settings may also let you clear site data at any time. Clearing site storage removes locally saved project progress on that browser.
6. Third-party services
The site may interact with third parties that process technical information under their own policies. These can include PayPal for voluntary payments, PokéAPI for public Pokémon data, GitHub-hosted resources for some image assets, and EmulatorJS/CDN infrastructure when you launch the browser demo. Visiting an external link or loading an external resource can disclose normal connection information such as your IP address to that provider.
Third-party providers are independent controllers/processors to the extent their own services determine how information is used. Review their privacy terms if you use those features.
7. Feedback and bug reports
When you submit a bug report, feature request, content issue or other feedback, the project stores the information you enter in its private administrative dashboard rather than sending it by email. This may include your report text, optional contact email, the page you reported from and, if you choose to include it, browser and viewport information used to reproduce bugs.
The report system does not intentionally store your IP address as part of the report record. Connection information may be used transiently for abuse/rate limiting and may separately appear in ordinary infrastructure security logs. Reports are kept while useful for triage, project history or follow-up and may be deleted by the administrator when no longer needed.
Bug reports are private by default. The public World Atlas may show the number of open bugs. Individual bug descriptions appear there only when the project administrator deliberately creates or approves a short public summary; contact details, reproduction steps, browser information and private administrative notes are not included in that public feed.
8. Local ROM selection
The browser-demo design aims to keep a ROM file selected by you on your own device. Unless a feature clearly tells you otherwise before you use it, the project does not need to upload the selected commercial ROM to the pokemondefinitive.com server. Do not send us ROM files by email.
9. Retention
Device-local data remains until you clear it, use the privacy controls to disable/delete it or your browser removes it. Operational/security logs, if generated by the hosting stack, should be retained only as long as reasonably needed for security and troubleshooting, subject to legal obligations. Emails and legal notices may be retained as reasonably necessary to document the request and response.
10. International services
Some third-party services operate internationally, so technical or payment information may be processed outside Serbia or your country. Those providers are responsible for the transfer mechanisms that apply to their service. We try to minimize the amount of project-controlled personal data sent to third parties.
11. Your privacy rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability or information about processing, and to withdraw consent where processing is based on consent. You may also have a right to complain to a competent data-protection authority.
For Serbia, the competent authority is the Commissioner for Information of Public Importance and Personal Data Protection. EU/EEA visitors may also have rights under the GDPR where it applies.
12. Children
The project is not designed to knowingly collect sensitive personal information from children. Public browsing does not require an account. Minors should not make payments unless they are legally permitted and satisfy the payment provider’s rules, including any required parental involvement.
13. Security
We use reasonable technical measures for a hobby website, but no internet system can promise absolute security. Do not send passwords, payment-card numbers, ROM files or other unnecessary sensitive information to the project by email.
14. Changes
This policy may change when the site adds features such as accounts, analytics or new providers. A materially different privacy practice will be described before the new processing is introduced where applicable.
15. Contact
Privacy requests: lega@pokemondefinitive.com. For the contractual rules governing the site, see the Terms of Use.