Privacy

Who is responsible

The person responsible for this app and for the data on its server is the owner, known as alemgg. Contact: alemvgc@gmail.com.

Who can use it, and signing in

The owner, on the computer the app runs on or from elsewhere, and the testers the owner invited to the closed beta. Everyone from elsewhere signs in through Cloudflare Access, which checks the email; the app then checks it against the owner's beta list (the only place an email is stored). Each tester's reviews, teams, Train answers, puzzles and games are kept apart: no other tester sees them. A shared review link opens for anyone who can sign in.

When you sign in from elsewhere, Cloudflare Access sees the email you sign in with and sets its own CF_Authorization cookie in your browser. The app server checks that token to know who is asking.

In your browser

• Local storage: your settings (language, theme, sprites, display), your current team, the Build checklist of benchmarks staged from reviews, and the last Sparring game or series shown on Home.
• Session storage, cleared when the tab closes: Sparring games and series in progress, and the teams carried from Test to Sparring and from a review to Build. The demo keeps its own saved teams, games and training answers there.
• Cookie: only Cloudflare Access's CF_Authorization, set when you sign in from elsewhere. The app itself sets no cookie.

You can clear all of it from your browser's site settings; settings and the current team then start over.

On the app server (the owner's computer)

The server runs on the owner's own PC; the owner can read everything on it. Once beta accounts exist, each person's reviews and teams will be kept under that person and shown only to them; the owner can still read the files.

What you make

• Reviews: the replays they are made from (links or pasted logs), the team paste you gave with them, and their analysis. Shared review links are kept with them and end when the review is deleted.
• Saved teams (My teams).
• Your Showdown names, if you save them, are kept on the app server to tell your side in imported replays and to search public replays; searches are sent to Pokémon Showdown. During the beta this is the owner's tool only.
• Profile: not stored on its own; it is worked out from your stored reviews each time, and kept only in memory.

Results and answers

• Test: every matchup and lead request with both teams' sets and its result, kept with no expiry in one cache shared by everyone (it records the teams, not who asked, so Delete my data does not remove it), and timing figures used to estimate the next run. Against the meta keeps its results in a size-limited cache.
• Train: each day's set of positions and every answer given, in a file that is only appended to.
• Puzzles: your answers (the puzzle, the line you chose, its grade and the date), the day's frozen set, and the flags raised on a puzzle.

Flags and messages

• Flags: the reason and what you wrote, and the review and decision they point at.They also hold salted SHA-256 hashes of the IP address and of the browser's user agent (for the daily limit and duplicates), in a separate monthly file that is only appended to. They are kept when the review is deleted, and the owner reads them (they are feedback on the engine); a beta tester's flags go with Delete my data.
• Feedback: what you type in the form (type, message, the contact if you give one), the app build, the page path without query or hash (the page's full address too, if you tick that box), the screen size and the language, in a file that is only appended to.Your address on the network is not stored: it is used in memory for a limit on how many messages one person can send, as a salted hash that is lost when the server restarts. alemgg reads the messages on a private page.

Not kept

• Sparring games and series stay in the server's memory only, until it restarts; a game you review becomes a review.
• The server keeps no log of who visited or what they opened. It prints start-up lines and refusal notices (method, path and reason, without addresses) to its own console window.

Other services

• Cloudflare: access from elsewhere goes through Cloudflare Tunnel and Cloudflare Access, which see the connection and the sign-in email under Cloudflare's own terms.
• Pokémon Showdown: the app server fetches the replays you import and the sprites (cached on the server); your browser does not contact Showdown for them. Links to a replay on replay.pokemonshowdown.com open that site only when you click them.
• GitHub: only if feedback-to-issues is switched on, a copy of each feedback message (type, message, contact, build, path, screen size, language and, if you ticked the box, the page's full address) is also filed as an issue in a private repository. Without that, messages stay on the app server.
• SPread Optimizer (spreadoptimizer.com): a Build link carries its benchmark or team inside the link, so opening it sends them to that site.
• Fonts and scripts are served by the app itself; no third-party font, script or image is loaded when a page opens.

No tracking

No tracking cookies, no advertising and no analytics: the app loads no analytics or ad script, and nothing is sent to a third party about what you do in it.

How long it is kept

• Reviews and saved teams: until you delete them (each has a delete button).
• Test results and timings, training and puzzle answers, flags and feedback: no automatic expiry. A beta tester removes their own with Delete my data (the shared Test cache and feedback messages stay); otherwise ask for their removal (below).
• Beta: today's usage counts per tester, under a code made from the email (never the email itself), reset every day.
• Sparring games and series: until the server restarts. Browser storage: until you clear it.

Your choices

You can ask what is kept about you, ask for a correction, or ask for everything linked to you to be deleted. A beta tester deletes it all in the app with Delete my data; for anything else ask by email and it is done by hand. Write to alemvgc@gmail.com.

Deleting a review or a saved team yourself, from the app, is available now.

Limits of this page

This page is written by the owner, not by a lawyer. It describes what the app does and does not claim compliance with any particular law.