POKÉSTRY.COM

Privacy policy

Last updated: 12 October 2026

POKÉSTRY is a Pokémon card collection tool for the web and iPhone. This policy explains how Elias Jalal, operating POKÉSTRY (the operator and data controller), handles information when you visit Pokéstry.com or use its account and collection features. Contact support@pokestry.com with privacy questions or requests.

Information we use

• Account information: your email address, account identifier, chosen display name, optional profile picture and authentication/session information.
• Google sign-in: Google provides your account identifier, email address and basic profile information, such as your name and profile picture, when you choose Google login. We request basic identity, email and profile access. We do not request access to your Gmail messages, contacts, Google Drive files or calendar.
• Collection records: card identifiers, languages, copy counts, favorite expansions, wishlist choices, scan-session records and expansions you add.
• Device information: local preferences, saved prices, card artwork and optional card photos. Camera/photo access is used only when you choose a relevant scanning or picture feature. Card-image recognition is performed on the device; card photos are not included in account collection sync.
• Technical and support information: IP addresses, browser/device information and request/security logs may be processed by hosting and service providers. If you email support, we receive your address and the information you send.

Why we use it

We use information to authenticate you, display your profile, maintain and sync your collection, provide requested card information, answer support requests and protect the service. Google account information is used for these account functions, not advertising. We do not sell your Google account data or use it to build advertising profiles. Use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We process information as needed to provide features you request, with your permission for optional features, to protect the service and to comply with applicable obligations. Where applicable law requires a legal basis, these purposes correspond to providing the requested service, consent, legitimate interests in security and support, or legal obligations.

Account sync, local storage and iCloud

Account sign-in and collection sync use Supabase. Synced collection records are associated with your account and access is restricted to that account. Session credentials and local collection/preferences are stored on your device. The website also uses an essential, short-lived administrator session cookie during maintenance.

Prices and scanned card photos remain in local storage rather than the account collection sync payload. The native iPhone app includes a separate optional iCloud backup integration for the device collection, subject to its availability and Apple configuration. If you enable an available iCloud backup, Apple processes the backup under your Apple account. Signing out does not erase collections saved on the device.

Service providers and external requests

We use Google for Google sign-in, Supabase for authentication and synced collection storage, Sites hosting with Cloudflare infrastructure for the website, and Infomaniak for support and verification email. Their services may process account or technical information necessary to operate those features.

Card artwork, catalog data and market information are obtained from providers including TCGdex, Pokémon card websites, TCGplayer, Cardmarket and exchange-rate services. Requests can include card/product identifiers and technical request data. Some website pages load fonts from Google Fonts, which receives the associated browser request. These requests do not give artwork or pricing providers access to your entire synced collection or Google account credentials.

Service providers may process information outside Switzerland, including in the European Union and United States, under their service arrangements and applicable safeguards. We do not promise that all information stays in Switzerland. More information: Google, Supabase, Sites/OpenAI, Cloudflare and Infomaniak.

Retention and deletion

We retain your live account and synced collection while you keep the account. You can request account deletion through account settings (which requires a recent sign-in) or contact support@pokestry.com. Account deletion removes the live authentication account and its linked synced collection. Local copies, cached artwork and any Apple backups must be removed separately on your devices or through Apple. Providers may retain limited backups and security logs under their retention arrangements. Support correspondence is retained as needed to handle the request and any applicable obligations.

Your choices and rights

You can change your display name, replace/remove your optional profile picture, stop using sync, revoke Google access in your Google account, revoke camera permission in device settings and request deletion. Revoking Google access does not by itself delete your POKÉSTRY account.

Depending on applicable law, you may request access, correction, deletion or restriction of personal information, object to processing, withdraw consent or request a portable copy. Contact support@pokestry.com; we may need to verify that the request concerns your account. You may also raise concerns with the competent data-protection authority, including Switzerland’s Federal Data Protection and Information Commissioner.

Updates

We will update this page when data practices change and use appropriate notice for material changes. The date above identifies the current policy.