thepocketdb.com
Log InSign Up

Privacy Policy

Last updated: July 2026

thepocketdb.com (“the Site”, “we”, “us”) is a free, ad-supported fan site for browsing the Pokémon Trading Card Game and Pokédex, tracking a card collection, and building decks. This policy explains what information we collect, how it is used, who we share it with, and the choices you have. By using the Site you agree to this policy.

1. Information we collect

a. Account information

Creating an account is optional and only needed to save card lists to the cloud. When you sign up we collect your email address, apassword, and an optional display name. Accounts and authentication are handled by our processor Supabase. Your password is hashed and stored by Supabase — we never see or store it in plain text.

b. Card lists

When logged in, the lists you create and the cards you add to them (card IDs, names, and images) are stored in our database (hosted by Supabase) and linked to your account so they sync across your devices. Database access is restricted by row-level security so that you can only read and modify your own lists.

c. Data stored in your browser

Some data is kept only in your browser using localStorage and never sent to us, including: your marked-owned collection, your theme (light/dark) and language preferences, a cached copy of recently fetched card/price data, and — if you log in — an authentication token issued by Supabase to keep you signed in. Clearing your browser storage removes this data from your device.

d. Automatically collected

Like any website, our hosting provider (Vercel) and the third-party services below receive standard technical information when your browser makes a request — such as your IP address, browser type, and the pages or resources requested — for the purpose of delivering content and security.

2. How we use information

  • To provide core features: accounts, saving and syncing your card lists.
  • To remember your preferences (theme, language) and your local collection.
  • To operate, secure, and improve the Site.

We do not sell your personal information.

3. Cookies & local storage

We use Google Tag Manager to load measurement and analytics tags (such as Google Analytics), which may set cookies or use similar technologies to understand how the Site is used. We also use browser localStorage(described above) for preferences, your local collection, caching, and your login session. Other third-party services we load may set their own cookies or storage as needed to function.

4. Third-party services

When you use the Site, data may be processed by these providers under their own privacy policies:

  • Google — Tag Manager and analytics/measurement tags to understand site usage.
  • Supabase — accounts, authentication, and the database that stores your lists.
  • Vercel — website hosting and delivery.
  • PokeAPI — Pokédex data.
  • Pokémon TCG API — card data and TCGplayer market prices.
  • TCGdex — Japanese and Pokémon TCG Pocket set data.
  • Card and sprite image hosts (images.pokemontcg.io, raw.githubusercontent.com), the Fontshare font CDN, and the jsDelivr CDN (used to load the Supabase library). Your IP address and standard request data are visible to these hosts when your browser loads their content.

5. International data transfers

Our database and authentication are hosted in a single region (currently in Asia). The third-party services above may process data in other countries. Where you access the Site from a different region, your information may be transferred to and stored in those locations.

6. Data retention & your choices

Account records (email, display name) and your lists are retained while your account exists. You are in control of your data:

  • Lists: delete any list at any time from the My Lists page (this removes its cards too).
  • Local data: clear your browser storage/site data to remove your collection, preferences, cache, and session.
  • Account deletion: the account information we hold is limited to your email and display name; you can request deletion of your account and stored lists at any time.

7. Children’s privacy

The Site is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please clear the account/data as described above.

8. Advertising & future changes

The Site is ad-supported. We do not currently serve personalized advertising, but in the future we may display ads — for example through Google AdSense — which may set cookies or use similar technologies to serve and measure ads. If that happens, this policy will be updated and, where required, you will be asked for consent.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.