Privacy Policy

Account and sign-in data

PokeCamp uses Supabase Auth for account authentication. Based on the sign-in method you choose, we collect only the data needed to authenticate you and provide account features.

• Google sign-in: unique Google account identifier, name or public display name, email address, and profile image
• GitHub sign-in: unique GitHub account identifier, username, public display name, email address when returned by GitHub authorization, and profile image
• Email sign-in (when enabled): the email address you submit and password credentials, one-time codes, or verification records processed by Supabase Auth; PokeCamp does not read or store plaintext passwords

How we use data

We use this information only to create and authenticate accounts, maintain sessions, display profiles, protect account security, and associate user-created data such as saved teams with your account.

We do not sell authentication data or use Google or GitHub user data for advertising.

Storage and sharing

Authentication is processed by Supabase Auth. Account details and data you save may be stored on Supabase infrastructure. Third-party sign-in data is passed by the relevant identity provider, currently Google or GitHub, to Supabase Auth. We do not share authentication data with other third parties except providers required for authentication, hosting, security, or legal compliance.

Third-party sign-in access scope

Google sign-in requests only the basic openid, email, and profile scopes. We do not access content from Google Drive, Gmail, Contacts, or other Google products.

GitHub sign-in accesses only the basic account profile needed for authentication. We do not access your repositories, code, organization resources, or other content unrelated to sign-in.

Retention, revocation, and deletion

We retain data only as needed to provide account features. You can revoke access from your Google or GitHub account third-party application settings. Revoking third-party access does not automatically delete your stored PokeCamp account or site data. To request access, correction, or deletion of your PokeCamp account and associated data, contact the developer email shown on the Google OAuth consent screen.

Security and policy changes

We use reasonable technical and access controls, but no internet service can guarantee absolute security. Material changes will be published here with an updated revision date.