Information We Collect
We only collect what is necessary to operate PokeCom. Here is a breakdown of everything we store:
- Discord User ID: Your unique Discord user ID is the primary identifier used to store your game progress, Pokémon collection, currency, and settings. This is not the same as your username.
- Discord Username & Avatar: Collected when you interact with the bot, used for display purposes within the game and leaderboards.
- Gameplay Activity: Records of in-game actions such as catching, trading, evolving, battling, auction bids, and marketplace activity. This data powers your game progress.
- Command Messages: Only the content of commands directed at PokeCom are processed. We do not read, store, or monitor general chat messages in your server.
- Verification Data: Your Discord User ID submitted through our verification website, used solely to issue a one-time code. This data is held in memory only and is never written to a permanent database.
- Payment Information: If you make a purchase, billing details are processed by Stripe. PokeCom does not store your full card number, CVV, or banking details. See Section 03 for full details.
How We Use Your Data
- Store and maintain your Pokémon collection, currency, progress, and game settings.
- Process trades, auctions, marketplace listings, and other in-game transactions between users.
- Deliver bot features that require Discord's privileged intents, such as member tracking and message command processing.
- Detect and prevent abuse, cheating, autocatcher usage, selfbot activity, and alt account violations.
- Send event notifications, update announcements, and community communications via Discord.
- Process and verify optional purchases made through Stripe.
Payments & Stripe
Optional paid features in PokeCom are processed through Stripe, a PCI-DSS compliant third-party payment processor. When you make a purchase:
- Your full card number, CVV, and banking details are entered directly into Stripe's secure payment form and are never seen or stored by PokeCom.
- PokeCom receives only a transaction confirmation and your Discord User ID to credit your account.
- Stripe may collect billing name, email, card type, last 4 digits, and billing address as required to process the transaction. Their use of this data is governed by Stripe's Privacy Policy.
- All purchases are final. Virtual goods purchased have no real-world monetary value and are non-refundable except where required by applicable law.
Security & Abuse Detection
To protect the fairness and integrity of PokeCom for all players, we collect and analyze the following for abuse detection purposes:
- Catch timing data: Timestamps of catch events are used to detect unnaturally fast or consistent response patterns consistent with autocatcher or bot usage.
- Catch rate data: The ratio of Pokémon caught versus spawned is tracked to flag accounts with abnormally high catch rates.
- Activity hours: Time-of-day activity patterns are reviewed to identify accounts active for abnormal continuous durations.
- IP addresses (rate limiting only): IP addresses are used in memory solely to enforce rate limits on our verification API. They are never logged to disk, stored in a database, or associated with your Discord account permanently. They are discarded automatically when the rate limit window expires.
- Account association signals: Behavioral patterns may be used to identify alternative accounts operated by the same person in violation of our one-account policy.
How We Protect Your Data
We take reasonable technical and organizational measures to protect your data, including:
- Storing game data on secured private servers with restricted access.
- Using HTTPS encryption for all web traffic to and from our verification site.
- Never logging IP addresses or sensitive data to disk.
- Using secret keys and server-side validation to protect our APIs from unauthorized access.
- Limiting data collection to only what is necessary to operate the service.
No system is completely secure. While we do our best to protect your data, we cannot guarantee absolute security against all threats.
Sharing Your Information
- We do not sell your personal information to any third party, ever.
- We do not share your data with advertisers or marketing companies.
- Limited data is shared with Stripe solely to process payments you initiate. See Section 03.
- We may share data if required to comply with a valid legal obligation, court order, or lawful request by authorities.
- In the unlikely event PokeCom is transferred or acquired, user data may transfer as part of that transition, and users will be notified.
Discord's Role
PokeCom operates as a Discord bot and relies on Discord's platform to function. Discord independently collects and processes data about your account and activity in accordance with their own privacy policy. PokeCom does not control Discord's data practices.
We encourage you to review Discord's Privacy Policy to understand how they handle your data independently of PokeCom.
Your Data Choices
You have the following rights regarding your data:
- Access: Request a summary of the data PokeCom holds associated with your Discord User ID.
- Deletion: Request permanent deletion of your account and all associated game data. Note that deleted accounts cannot be recovered.
- Correction: If you believe we hold inaccurate data about you, you may request a correction.
- Opt-out: You may opt out of optional communications such as event announcements at any time by leaving the relevant Discord server or adjusting your notification settings.
To exercise any of these rights, contact us at [email protected] or through our Discord server. We will respond within a reasonable timeframe.
Third-Party Links
PokeCom may include links to third-party websites or services such as Top.gg, Stripe, or Discord. We are not responsible for the privacy practices of these services. We encourage you to review their individual privacy policies before sharing any personal information with them.
Retention & Service Termination
- Game data is retained for as long as your account is active on PokeCom.
- Verification codes and IP rate limit data are held in memory only and are automatically discarded within minutes. They are never stored permanently.
- If your account is terminated for a Terms of Service violation, your game data will be permanently deleted and is not recoverable.
- If you request account deletion, all associated data will be permanently removed within a reasonable timeframe.
- PokeCom reserves the right to modify, suspend, or shut down the service at any time. In such cases, we will make reasonable efforts to notify users in advance.
Fan-Made Disclaimer
PokeCom is a fan-made, non-commercial project inspired by Pokémon. All official Pokémon trademarks, logos, and characters are the property of their respective owners. PokeCom is not affiliated with, endorsed by, or sponsored by Nintendo, Game Freak, or The Pokémon Company.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will announce them in our Discord server. Continued use of PokeCom after changes are posted constitutes your acceptance of the updated policy.
Contact Us
- Email: [email protected]
- Discord: Join PokeCom Official Server