Privacy Policy
Last updated: October 22, 2026
Overview
PokePack Tracker is run by an individual sole proprietor in the United States. This policy explains what we collect, why, who processes it for us, and how you can access or delete it. We keep only what we need to run the Service, and we do not sell your personal information.
What we collect
- Email address — to log you in and send alerts and account emails.
- Password hash — your password is stored only as a bcrypt hash; we never store it in plain text.
- Watch list — the products you choose to track.
- Discord ID and username (optional) — only if you link Discord, so we can assign the Pro role in our community server and show which Discord account is linked.
- Discord webhook URL (optional) — only if you turn on Discord alerts, so we can post your alerts to the channel you choose. Anyone with this URL can post to that channel, so we keep it private and you can remove or change it in Settings at any time.
- Stripe customer ID — if you subscribe, so we can match your account to your subscription.
We never see or store your card details. Payments are entered on and handled by Stripe.
Anonymous visitor statistics
To see how many people visit the site, our own server counts page views. For each page view we record only the date, the page path (without query details), the referring website's domain (for example reddit.com, with no full link), and a utm_source campaign tag if the link had one. We do not store IP addresses, browser user agents, or account IDs with these counts, and we use no analytics cookies and no third-party analytics scripts.
To count daily unique visitors, we combine your IP address and browser user agent with a random value that changes every day and keep only a one-way hash of the result. The daily random value is deleted when the day ends, so these hashes can't be turned back into an IP address or used to follow you from one day to the next. Requests from obvious bots are not counted. The results are only used in aggregate (for example, "120 views from reddit.com today").
Separately, the site sets one essential session cookie to keep you logged in and to protect forms against cross-site request forgery. It is not used for tracking or statistics.
How we use it
To provide the Service: authenticate you, check the products on your watch list, send alerts on Discord (and by email once email alerts launch), manage your subscription, grant or remove the Discord Pro role, and keep the Service secure and working.
Third-party processors
- Stripe — payment processing and the subscription/customer portal.
- Discord — alert delivery and, if you link your account, community server membership and the Pro role.
- Hosting and database providers (such as Render and Neon) — run the app and store its data.
- Email delivery provider — sends alert and account emails.
Each provider handles data under its own privacy policy. We share only what is needed for the provider to do its job.
Retention
We keep your account data while your account is active. If you ask us to delete your account, we delete your personal data from our systems, except where we need to keep limited records (for example, billing records kept by Stripe) to meet legal or accounting obligations.
Your rights
You can ask to access, correct, or delete your personal data at any time by emailing kaiknyby@gmail.com from the address on your account. You can unlink Discord or remove your Discord webhook URL from Settings at any time. Depending on where you live, you may have additional rights under local law.
Security
We use reasonable measures to protect your data, including hashed passwords and encrypted (HTTPS) connections. No online service can be perfectly secure.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal data from them.
Changes and contact
If we change this policy we will update the "Last updated" date above. Questions or requests: kaiknyby@gmail.com. See also our Terms of Service, Refund & Cancellation Policy and FAQ.