Privacy Policy

Overview

Pikapedia respects your privacy. This page explains what information is collected when you use the site, why it is collected, and how it is kept safe. By using Pikapedia you agree to the practices described here.

Information we collect

We collect only what we need to run the site, keep trainer accounts safe, and prevent abuse:

• Account data — email address, trainer name, favorite Pokémon, birthday (optional), and gameplay data such as Pikacoins, catch collection, Fakémon designs, and market activity.
• Technical data — IP address, browser user agent, referring URL, and pages visited. This is used to keep the site running, investigate abuse (spam, harassment, fraud, ban evasion), and enforce our Terms of Use. IPs are logged for page views and for form submissions (e.g. the contact form).
• Contact form submissions — the name, email, subject, and message you send us, along with the IP and user agent of the submission, so we can respond and moderate abuse.
• Local preferences — settings such as your last viewed Pokémon, theme, or session ID are stored in your browser via localStorage / sessionStorage. They never leave your device except as part of normal analytics events.
• Chat input — if you use the on-site assistant, the messages you send are forwarded to a third-party AI provider to generate a response. Do not submit personal or sensitive information.

We do not knowingly collect data from children under 13. We do not sell or rent personal information to anyone, ever.

How your data is protected

Pikapedia is built on managed cloud infrastructure with modern security practices:

• All traffic between your device and Pikapedia is encrypted over HTTPS/TLS.
• Data is stored in a managed Postgres database with encryption at rest and daily backups.
• Passwords are hashed by our authentication provider — we never see or store your raw password, and new passwords are checked against known-breached password lists.
• Every table protecting personal data uses Row-Level Security so users can only read and write their own rows. Sensitive fields (contact submissions, IPs, page views, admin logs) are readable only by site administrators.
• Rate limiting and abuse detection are enforced on public endpoints (login, signup, contact form, AI features) to protect against brute force and spam.
• No third party outside our hosting, database, email, payment, and AI providers ever receives your data, and none of them are permitted to sell or repurpose it.

No internet service can guarantee 100% security, but we treat every trainer's data as if it were our own and continuously review our controls.

Cookies & similar technologies

Pikapedia uses a small number of first-party cookies or local-storage entries needed for basic functionality (staying signed in, remembering preferences, session analytics). Third-party services we rely on (hosting, analytics) may set their own cookies governed by their respective privacy policies.

Third-party services

• PokéAPI — game data is fetched from this open community project.
• Hosting, database, and CDN providers, which may log standard request metadata.
• Email delivery provider used for account and transactional emails.
• Payment provider used for shop purchases — payment card details are handled entirely by them and never stored on our servers.
• Optional AI provider used to power the in-site assistant and Fakémon tools.
• Product analytics (page-view counts, session heatmaps) used only in aggregate to improve the site.

Your rights

Depending on where you live (e.g. EEA, UK, California), you may have the right to access, correct, delete, export, or restrict processing of personal data we hold about you, and to lodge a complaint with your local data-protection authority. You can delete your Pikapedia account at any time from your Account page, which removes your profile and gameplay data.

To exercise any of these rights, contact us at the address below.

Data retention

Account and gameplay data are kept for as long as your account is active. Contact-form submissions, page-view logs, and IP records are retained for up to 12 months for security, fraud prevention, and moderation purposes, then deleted or anonymised. Backups are rotated on a rolling schedule.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected here with an updated "Last updated" date.

Contact

Questions or privacy requests? Reach out via our Contact page.