Privacy Policy

Last updated: April 18, 2026

This Privacy Policy describes how PokéNerdle ("we", "us", or "our") collects, uses, and protects your information when you use the PokéNerdle website and services (the "Service") available at pokenerdle.app.

1. Information We Collect

We collect the minimum information necessary to operate the game and provide a good experience:

• Account information (via Google Sign-In): When you choose to sign in with Google, we receive your email address, display name, and profile picture from Google. We do not receive your Google password.
• Gameplay data: Your guesses, results, daily challenge progress, and preferences (e.g. theme, language) so you can resume play across devices.
• Usage analytics: Anonymous usage data (pages visited, feature interactions, approximate region) collected via PostHog to help us improve the Service.
• Technical data: Basic logs such as IP address, browser type, and timestamps for security and reliability.

2. How We Use Your Information

• To authenticate you and keep you signed in.
• To save and sync your game progress, preferences, and statistics.
• To operate features like leaderboards and multiplayer battles.
• To analyze usage and improve the Service.
• To detect abuse, fraud, or technical issues.

We do not sell your personal information, and we do not use it for advertising.

3. Google User Data

PokéNerdle's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the basic profile scopes needed to sign you in (email and basic profile), and we do not share this data with third parties except as strictly necessary to provide the Service.

4. How We Store and Protect Data

Account and gameplay data is stored on Supabase (PostgreSQL). We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Access to production data is restricted to authorized maintainers.

5. Third-Party Services

We rely on a small number of third-party providers:

• Google — OAuth sign-in (see Google Privacy Policy).
• Supabase — authentication and database hosting (see Supabase Privacy Policy).
• PostHog — product analytics (see PostHog Privacy Policy).
• Heroku — application hosting (see Salesforce/Heroku Privacy Notice).

6. Cookies and Local Storage

We use cookies and browser local storage to keep you signed in, remember your preferences (theme, language), and collect anonymous analytics. You can clear these at any time from your browser settings, though doing so will sign you out and reset your preferences.

7. Your Rights

You may, at any time:

• Sign out of your account.
• Request a copy or deletion of your account data by contacting us at the email below.
• Revoke PokéNerdle's access to your Google account via your Google Account permissions page.

8. Children's Privacy

PokéNerdle is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, please contact us and we will delete it.

9. Data Retention

We retain account and gameplay data for as long as your account is active. If you request deletion, we remove your personal data within a reasonable period, except where we are required to retain it for legal or security reasons.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be highlighted in the app or via email where appropriate.

11. Contact