Privacy Policy

Pokopia Companion is a free fan tool for Pokémon Pokopia, built and operated by an individual (me, Nicoletta) — not a company. This page tells you, in plain English, what data the site touches, why, and what you can do about it.

What the site collects

The data the site touches depends on whether you use it signed-in or signed-out.

Signed-out (anonymous) visitors

Your progress (habitats checked, Pokémon caught, build queue, saved roommate groups, shopping list, filter preferences) is stored only in your browser's localStorage. The site itself never sees this data — it never leaves your device. Clearing your browser data deletes it forever.

There is no account, no email, no identifier collected.

Signed-in visitors

When you sign in, two extra things happen:

• Your email address is stored by Firebase Authentication (a Google service) so we can recognise you across devices.
• Your progress is mirrored to Firestore (also a Google service) so it syncs between your phone, laptop, and any other device you sign in on.

Signing out wipes your local cache for privacy on shared devices. Your cloud copy stays until you ask me to delete it (see “Your rights” below).

For everyone, signed-in or not

• Anonymous analytics via Vercel Analytics: page visits, basic device type, country level. No cookies, no personal identification.
• Error reports via Sentry, only when something on the site actually breaks. Anonymous stack traces; we deliberately filter out browser-extension noise so the reports stay focused on bugs that matter.
• Ad cookies via Google AdSense, ONLY if you consent via the cookie banner. Decline and the site works exactly the same minus the ads.

Third parties involved

Pokopia Companion uses these external services to run. Each has its own privacy policy linked from its name.

• Firebase (Google) — authentication + progress sync for signed-in users. Stores email + progress data.
• Vercel — hosting + anonymous traffic analytics. Sees page requests; not your identity.
• Sentry — error monitoring. Sees stack traces from real bugs; browser-extension noise is filtered out before it ever reaches the dashboard.
• Formspree — powers the Contact form. Whatever you type in the form, plus your email if you choose to share it, is delivered to my inbox.
• Google AdSense — banner ads (desktop right rail only, once enabled), plus the EU cookie consent banner (Funding Choices). Only sets cookies after you consent.

Cookies & local storage

Three buckets of data-storage tech are in play here:

• Essential (always on)— Your progress lives in your browser's localStorage. Strictly necessary for the site to remember what you've checked off between visits. No cookies; no third party can read this.
• Analytics (no cookies) — Vercel Analytics does not set cookies. It relies on anonymous request metadata only.
• Advertising (opt-in only)— Google AdSense sets cookies for ad selection and frequency capping ONLY if you accept via the cookie banner. Decline and ads either don't show, or show non-personalised contextual versions that don't use cookies.

Your rights

If you're in the EU, EEA, UK, Switzerland, or any region with comparable privacy law, you have the right to:

• Access the data the site holds about you
• Correctanything that's wrong
• Deleteyour data (“right to be forgotten”)
• Object to specific processing (e.g. analytics, ads)
• Withdraw consent at any time
• Lodge a complaintwith your local data-protection authority — for the Netherlands, that's the Autoriteit Persoonsgegevens.

To exercise any of these, message me via the Contact page inside the app — I read every request personally.

Anonymous usershave nothing on the site's servers to access or delete; just clear your browser data and the local copy is gone.

Signed-in userscan also request full account deletion via Contact — I'll wipe the Firestore document and remove the Firebase Auth record myself (manual step, takes a day or two given the project's small scale).

Children

Pokopia Companion is a fan tool for a Pokémon game with a broad age range. The site itself doesn't target or knowingly collect data from children under 13 (or 16 in EU jurisdictions). If you're a parent and believe your child has signed up using their email, reach out via Contact and I'll delete the account.

Changes to this policy

If this policy changes, the “Last updated” date at the top changes too. Material changes (new third parties, new data types, new processing purposes) will be announced via the in-app news banner on the Dashboard so returning users see them.