Policy · Privacy
Privacy
Everything the shop keeps about you, written plainly. We keep only what an order needs, and we never ask for your Pokétwo or Discord login.
What we store
| What | Why | Kept |
|---|---|---|
| Your username and password | To sign you in. The password is stored only as a salted PBKDF2 hash; nobody, including us, can read it. | While the account exists |
| Your orders: amount, payment method, Market ID, price shown, status and times | To deliver them, answer questions and keep business records | While the shop operates |
| Your email, if you give one | Receipts and delivery notes; event, code and restock emails unless you switch them off | Until you remove it |
| Support messages | To answer you | While the account exists |
| Level, XP and badges | The trainer pass and its rewards | While the account exists |
| Your IP address | Briefly, to slow down abuse (too many sign-ins or orders) | Minutes to an hour; a password-reset request keeps it for 7 days |
We never ask for, receive or store your Pokétwo or Discord password, tokens or authorisation, and we never see card details: you pay inside PayPal, Cash App, your UPI or PIX app, or your crypto wallet.
What your browser keeps
The site stores a few things in your own browser's local storage: your signed-in name and session, your chosen currency, your recent orders for quick display, and display preferences. Clearing your browser data removes them. We do not use advertising or tracking cookies.
Who processes it
- Cloudflare hosts the site, the API and the database, and delivers mail to the shop owner.
- Resend sends the emails that go to customers.
- Discord receives a notification for the shop owner when an order is placed (username, amount and Market ID).
- CoinGecko and Coinbase provide exchange rates; our server asks them, and if that fails your browser may ask them directly.
- Google Fonts and Pokémon Showdown serve the fonts and Pokémon images the pages show, so your browser contacts them when loading a page.
We do not sell or share your information with anyone else.
Every event or restock email has a one-click unsubscribe link, and you can switch them off any time in Settings in your profile menu. Receipts for orders you place are sent regardless, because they are about your own order.
Seeing, changing or deleting your data
You can change your username, email and password yourself in the profile menu. To get a copy of what we hold, or to have your account deleted, contact us. Orders are kept as business records even after an account is deleted, with the email removed.
Copies of the database are kept for 30 days for recovery, email logs for 14 days, error logs for 7 days, and the owner's action log for a year.
Contact
Questions about any of this: email [email protected], or message not.your.renji on Discord. Signed-in trainers can also write from the Support tab in their profile menu.