Privacy Notice

Last updated: 2 October 2026

What we store

If you create an account, the service stores your email address, password hash, verification status, optional player and trainer details, Player ID, year of birth, avatar preference, saved teams and account timestamps. Uploaded avatars are stored separately from the public web root.

Why we use it

This information is used to provide account access, save and restore teams, pre-fill player details, support account security and produce anonymous aggregate statistics such as registered-user counts and popular Pokémon.

Security information

The service keeps limited security records for authentication and abuse prevention. Passwords are stored as one-way password hashes rather than readable passwords.

External services

The site uses PokéAPI and related sprite repositories to retrieve Pokémon and item data. Pokémon GO builder data is loaded from PvPoke's open gamemaster data. Pokémon GO form artwork is resolved using the public Pokémon GO API and its asset repository, with PokéAPI used as a fallback. If you use the default Gravatar avatar, a hashed form of your email address is used to request the avatar from Gravatar. Those providers may receive ordinary connection information such as your IP address when your browser requests their resources.

Play! Pokémon QR feature

The experimental QR code is generated in your browser from the player details already shown in your profile. The generated QR image itself is not separately uploaded to the server.

Retention and deletion

Your account data is retained while your account exists. Using Delete account removes your server-side account, saved teams, verification and reset tokens, profile data and uploaded avatar. The site also clears its current local team drafts on that device when account deletion completes.

Your choices

You can update your profile information at any time and can permanently delete your account from the Profile page. For other privacy questions or requests, contact the site administrator through Pokémon League Swindon.

Children and guardians

If local law requires a parent or guardian to consent to use of an online service, that consent should be obtained before creating an account.