thepocketdb.com
Log InSign Up

Privacy Policy

Last updated: July 2026

thepocketdb.com (“the Site”, “we”, “us”) is a free, ad-supported fan site for browsing the Pokémon Trading Card Game and Pokédex, tracking a card collection, and building decks. This policy explains what information we collect, how it is used, who we share it with, and the choices you have. By using the Site you agree to this policy.

1. Information we collect

a. Account information

Creating an account is optional and only needed to save card lists to the cloud. When you sign up we collect your email address, apassword, and an optional display name. Accounts and authentication are handled by our processor Supabase. Your password is hashed and stored by Supabase — we never see or store it in plain text.

b. Card lists

When logged in, the lists you create and the cards you add to them (card IDs, names, and images) are stored in our database (hosted by Supabase) and linked to your account so they sync across your devices. Database access is restricted by row-level security so that you can only read and modify your own lists.

c. Data stored in your browser

Some data is kept only in your browser using localStorage and never sent to us, including: your marked-owned collection, your theme (light/dark) and language preferences, a cached copy of recently fetched card/price data, and — if you log in — an authentication token issued by Supabase to keep you signed in. Clearing your browser storage removes this data from your device.

d. Automatically collected

Like any website, our hosting provider (Vercel) and the third-party services below receive standard technical information when your browser makes a request — such as your IP address, browser type, and the pages or resources requested — for the purpose of delivering content and security.

2. How we use information

  • To provide core features: accounts, saving and syncing your card lists.
  • To remember your preferences (theme, language) and your local collection.
  • To operate, secure, and improve the Site.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

3. Cookies & local storage

We use Google Tag Manager to load Google Analytics 4 (GA4), which uses cookies or similar technologies to understand how the Site is used (for example, which pages are viewed, and approximate location and device/browser derived from your IP address). For visitors in the EEA, the UK, and Switzerland, these analytics cookies are not set until you agree via our cookie banner — we use Google Consent Mode to enforce this. You can change or withdraw your choice at any time using “Cookie settings” in the footer, or opt out of Google Analytics in any browser with Google’sopt-out add-on. We also use browser localStorage (described above) for preferences, your local collection, caching, and your login session. Other third-party services we load may set their own cookies or storage as needed to function.

4. Third-party services

When you use the Site, data may be processed by these providers under their own privacy policies:

  • Google — Tag Manager and Google Analytics 4 (GA4) to measure and understand site usage.
  • Supabase — accounts, authentication, and the database that stores your lists.
  • Vercel — website hosting and delivery.
  • PokeAPI — Pokédex data.
  • Pokémon TCG API — card data and TCGplayer market prices.
  • TCGdex — Japanese and Pokémon TCG Pocket set data.
  • Card and sprite image hosts (images.pokemontcg.io, raw.githubusercontent.com), the Fontshare font CDN, and the jsDelivr CDN (used to load the Supabase library). Your IP address and standard request data are visible to these hosts when your browser loads their content.

5. International data transfers

Our database and authentication are hosted in a single region (currently in Asia). The third-party services above may process data in other countries. Where you access the Site from a different region, your information may be transferred to and stored in those locations.

6. Data retention & your choices

Account records (email, display name) and your lists are retained while your account exists. You are in control of your data:

  • Lists: delete any list at any time from the My Lists page (this removes its cards too).
  • Local data: clear your browser storage/site data to remove your collection, preferences, cache, and session.
  • Account deletion: the account information we hold is limited to your email and display name; you can request deletion of your account and stored lists at any time.

7. Children’s privacy

The Site is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please clear the account/data as described above.

8. Advertising & future changes

The Site is ad-supported. We do not currently serve personalized advertising, but in the future we may display ads — for example through Google AdSense — which may set cookies or use similar technologies to serve and measure ads. If that happens, this policy will be updated and, where required, you will be asked for consent.

9. Your privacy rights

Depending on where you live — for example under the EU/UK GDPR or the California CCPA/CPRA — you have rights over your personal information, including:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate information (e.g. your display name).
  • Erasure — ask us to delete your account, lists, and associated data.
  • Restriction & objection — ask us to limit or stop certain processing.
  • Portability — receive your data in a portable, machine-readable format.
  • Withdraw consent — where processing relies on consent (e.g. analytics cookies), withdraw it at any time.
  • Do not sell or share — we do not sell your personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of on this point today.
  • Complaint — you may lodge a complaint with your local data protection authority.

You can exercise several of these yourself right now: delete lists on theMy Lists page, clear your browser storage to remove local data, and change or withdraw your analytics consent anytime via “Cookie settings”in the footer. For account deletion or any request we cannot automate, please contact us; we aim to respond within one month.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.