Privacy policy

Last updated: 21 July 2026

This Privacy Policy explains how PokeIndie collects, uses, shares, and protects personal data when you use the PokeIndie website and services (the "Service"). The data controller is MML Digital Foundry ("PokeIndie", "we", "us"), Global. For privacy questions or to exercise your rights, contact [email protected]. If we have appointed a data protection officer or EU/UK representative, they can be reached at [email protected].

1. Information we collect

  • Account and profile data: name, username, email address, avatar, timezone, and, if you sign in with a provider (Google, Discord, Twitch, Kick), the identifier and basic profile that provider returns.
  • Content you provide: game listings, media, collections, messages, reports, and other submissions.
  • Billing data: if you purchase Premium, our payment processor Stripe handles your card details. We receive limited data such as your subscription status and the last four digits and card type; we do not store full card numbers.
  • Usage and device data: pages viewed, interactions ("pokes"), approximate location derived from IP, IP address, browser and device information, and log data, collected to run analytics, security, and abuse-prevention.
  • Cookies and similar technologies: as described in our Cookie Policy.
  • Communications: messages you send us and support requests.

2. How we use your data and our legal bases

Where the GDPR or similar laws apply, we rely on the following legal bases:

  • To provide the Service (accounts, listings, messaging, billing): performance of a contract with you.
  • To secure and improve the Service, prevent fraud and abuse, and understand aggregate usage: our legitimate interests, balanced against your rights.
  • Analytics and advertising cookies: your consent, which you can withdraw at any time.
  • To meet legal obligations (for example tax, accounting, and responding to lawful requests): compliance with a legal obligation.
  • AI-assisted import and moderation: legitimate interests in operating an efficient, safe catalogue; we do not use this to make solely automated decisions with legal or similarly significant effects about you.

3. Cookies and analytics

We use strictly necessary cookies to run the Service and Google Analytics by default to understand usage. Analytics storage is disabled when you decline it, advertising storage remains disabled, and IP addresses are handled in a truncated/anonymized manner. You can manage your choice at any time through the "Cookie settings" control on the site. See the Cookie Policy for the full list.

4. Advertising

We may display advertising, including through Google AdSense and its partners. Where advertising is enabled:

  • Third-party vendors, including Google, use cookies and similar technologies to serve ads based on your prior visits to this and other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to the Service and other sites.
  • You can opt out of personalized advertising by Google through Google Ads Settings.
  • You can opt out of personalized advertising from participating third-party vendors at aboutads.info/choices (US) or youronlinechoices.eu (EU/UK).
  • For more information on how Google uses data from sites that use its services, see policies.google.com/technologies/partner-sites.

Analytics is enabled by default and can be disabled through the consent panel or Cookie settings. Advertising storage remains disabled.

5. How we share data

We do not sell your personal data for money. We share data only as follows:

  • Service providers (processors): hosting and infrastructure, Cloudflare (CDN and security), Stripe (payments), Google (analytics and, where enabled, advertising), Discord/Twitch/Kick (sign-in and integrations you enable), OpenAI (AI-assisted import and moderation), and email delivery. They act on our instructions under contract.
  • Other users: your public profile, username, and published listings are visible to others by design.
  • Legal and safety: where required by law or to protect rights, safety, and the integrity of the Service.
  • Business transfers: in connection with a merger, acquisition, or asset sale, subject to this Policy.

Some privacy laws (for example the California CPRA) define "sharing" for cross-context behavioral advertising broadly. If advertising cookies are enabled, that activity may be considered a "sale" or "share" under those laws, and you can opt out using the "Cookie settings" control and the "Do Not Sell or Share My Personal Information" choices described below.

6. International transfers

We and our providers may process data in countries other than yours, including outside the EEA/UK. Where we transfer personal data internationally, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism.

7. Data retention

We keep personal data only as long as necessary for the purposes described here: account data for as long as your account is active; billing records for the periods required by tax and accounting law; and analytics and logs for limited periods. When data is no longer needed we delete or anonymize it. You can delete your account from your profile settings, subject to obligations that require us to retain certain records.

8. Security

We use technical and organizational measures such as encryption in transit, access controls, and dedicated service accounts to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

If you are in the EEA, UK, or a similar regime, you have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. You may lodge a complaint with your local supervisory authority.

If you are a California resident, you have the right to know, delete, and correct your personal information, to opt out of the "sale" or "sharing" of personal information, to limit use of sensitive personal information, and not to be discriminated against for exercising your rights. You can exercise the opt-out through the "Cookie settings" control (which acts as our Do Not Sell or Share My Personal Information mechanism) and we honor Global Privacy Control signals where required.

To exercise any right, contact [email protected]. We will verify your request and respond within the timeframes required by law. You may use an authorized agent where permitted.

10. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Third-party links

The Service links to third-party sites and stores. We are not responsible for their privacy practices; review their policies before providing data.

12. Changes to this Policy

We may update this Policy from time to time. We will change the date above and, for material changes, provide additional notice. Your continued use after changes take effect constitutes acceptance where permitted by law.

13. Contact

Privacy questions and requests: [email protected].