Privacy

On this website

pokederby.com sets no cookies. Its fonts, pictures and scripts all come from the site itself, and there are no ad tools or outside analytics on it or in the browser game. Links to other places, such as X or the credits at the bottom, only leave the site when you click them.

To know how many people visit, each page tells the game server which page it is, the name of the site whose link brought you there (such as x.com, never the full address) and which download you click. The server adds that to the day's totals and keeps nothing else about the visit. To count each visitor once a day, it keeps a scrambled code made from your IP address, your browser's name and a random key that changes every day, in its memory only, until the day ends. If your browser asks sites not to track you (Global Privacy Control or Do Not Track), the pages send nothing.

Like any website, ours sees your IP address when your browser asks for a page. The site isn't set up to keep a log of visits.

Playing without an account

Your saves and settings stay on your device. In the browser they live in the browser's own storage for pokederby.com (IndexedDB), so clearing the site's data for pokederby.com erases them. On Windows they live in the game's data folder on your computer. The game doesn't contact the game server until you choose to play online.

Playing online

“Play as guest” makes an account with no email and no password. The game server then keeps:

• Who you are in the game. A random 12-digit trainer ID (the one the game shows you), your trainer name, when the account was made and last used, and what you play on (the Windows game, or a browser on a computer, iPhone, iPad or Android), taken from the name your game or browser sends.
• Sign-in keys. Your device holds a sign-in token. The server keeps only a scrambled (hashed) copy of it, and of the one-time link codes that sign in another computer, so a copy of the database can't be used to sign in as you.
• Cloud saves. The files the game writes: your career, your setup picks, your trainer card and your collection.
• Careers. For a career saved online: its seed, your racer, how far it got and, once it's finished, the grade and score the server checked and the racer's final build.
• Team Trials and the weekly Cup. The four racers on your team, every nightly race they run (its whole setup, the placings and points) and each Cup's finishing order. Other players can see your trainer name on the standings and in races that include your racers. Each week's Cup top three, with their trainer names and racers, are also posted in the news channel of the Poke Derby Discord server.
• Friend races. If you make a friend code: the code, the racer and course it sends, and each race run with it (both racers and the result). Whoever has your code sees your trainer name and racer.

If you sign in with Google or Discord, the server stores only your Google or Discord account ID, so it can tell it's you next time. It doesn't store your email address or your name from either one. Google and Discord handle their side of the sign-in under their own privacy policies.

If you set a password, the server keeps your login name and scrambled (hashed) copies of your password and your recovery code, never the password itself. Other players don't see your login name.

If you add an email for password resets, the server keeps it and uses it only to send you a 6-digit code: once to check the address, and when you ask for one because you forgot your password. Those emails go out through Resend, an email company, which handles them under its own privacy policy. You can take the email off at any time in the game under Account, then Password and email.

Your IP address

When you play online the server sees your IP address and uses it to slow down abuse, such as one address making hundreds of accounts. Those counts are held in the server's memory, not saved in the database, and they start over when the server restarts. The website's visitor count above works the same way: nothing made from your IP address is saved.

Logs and backups

The game server doesn't log each request. Its log notes things like starting up, errors, and when a finished career has been checked (with the career's seed and an internal account number).

The database is copied every night, and the copies are kept for 14 nights. The server's host, Vultr, also takes automatic backups of the whole server on its own schedule. So data you change or have deleted can stay in a backup for a while until it's replaced.

If you send a report

A bug report or idea you send keeps what you wrote, what kind it is, your browser or system name, and the screenshot if you add one. Your IP address isn't saved with it. A report sent from inside the game can add details such as the game version, your screen size and recent game messages, and is linked to your account if you're signed in. Reports go to a private inbox that only the maker reads. Each one is also posted to a private channel on the Poke Derby Discord server that only the maker and its moderators can see: its kind and number, your trainer name if you're signed in, the game version, system and screen, and the first 600 characters of what you wrote, with no screenshot. Discord keeps that post under its own privacy policy. Please keep personal details out of your message and screenshot.

Deleting your data

You can delete your account yourself: on the game's Home screen, open Account, then pick Delete my account. It's removed from the server right away, with its cloud saves, careers, Team Trials teams and races, friend codes and friend races, Google or Discord sign-ins, login name, password, email, sign-in keys and bug reports. Posts already on the Poke Derby Discord server (your reports in the private channel, or a past Cup's top three) stay there; ask the maker and they will be deleted.

If you can't get into your account any more, send a message to the maker on X (@Zietes_) with your trainer ID and it will be removed for you.

Afterwards, your racers stay in the finished weekly Cups and other players' Team Trials races they ran in, under the name “Trainer”. Your data can stay inside the backups described above until they are replaced. If the maker ever acted on your account under the rules (changed your name, banned or deleted it), a note of that, with your trainer ID and the name at the time, is kept.

Your device's own copy of your saves is yours to delete: clear the site data for pokederby.com in your browser, or delete the game's data folder on Windows.

If this changes

This page will be updated, and the date at the top changed, when what the game keeps changes.