1. Scope and controller
This Privacy Policy applies to Poke.party, operated by 1990Company at 601, 7, Cheonjung 1-gil, Dongnam-gu, Cheonan-si, Chungcheongnam-do, South Korea. 1990Company is responsible for the account, trainer, raid, friend-listing, consent, and privacy-request information described below.
For privacy questions or requests, email privacy@1990.company. For account, service, or purchase support, email support@poke.party.
2. Information we collect
- Account and sign-in information: account identifier, email address, verification status, sessions, one-time sign-in-code records, and—if you choose social sign-in—the provider account identifier and authentication tokens needed to keep that connection working.
- Service-country information: the country you confirm so we can route data and provide the right service experience. Interface language does not choose where your data is handled.
- Trainer information: trainer name, Trainer Code, level, team, public raid name, and whether that public name is enabled.
- Friend listings: the public name, Trainer Code, country, optional city, language, activity pattern, friendship purposes, refresh time, and expiry that you choose to publish.
- Raid information: room settings, an optional public gym name, public or link-only visibility, public or private game-lobby mode, host and participant roles, readiness and invitation progress, public-name snapshots, an optional three-Pokémon game lobby code, and acknowledgement records needed to operate a room.
- Optional screenshot assistance: up to two trainer screenshots and the extracted profile suggestions. The images are processed for that request and are not saved in Poke.party application storage. Only values you review and submit are saved to your profile.
- Uploads and safety information: upload metadata and private files you intentionally submit for profile, verification, reporting, moderation, or support features when those features are available.
- Purchase information: Poke.party offer, checkout, order, transaction, subscription, refund, and access-status identifiers received from Creem. Poke.party does not receive or store your full card or bank-account details.
- Privacy-request information: the request type and status, verification and response dates, temporary export location, and completion reference.
- Device and service information: necessary request, security, rate-limit, and error information used to keep the service reliable and prevent abuse.
- Analytics and advertising choices: your first-party settings choice, GA4-normalized page routes, and a limited set of sign-in, onboarding, trainer, friend-finder, pricing, checkout-status, and raid-flow events. When advertising is available, Google may also receive the information needed to select, deliver, secure, limit, and measure an ad, subject to the choices and regional controls described below.
3. How and why we use information
Where data-protection law requires a legal basis, we rely on performance of our agreement with you for requested account and coordination features; your consent where required for optional analytics, advertising, and information you deliberately publish; our legitimate interests in security, fraud prevention, support, and service reliability; and legal obligations for tax, accounting, disputes, and lawful requests. You can withdraw optional consent at any time, but withdrawal does not affect earlier lawful processing.
- To create and secure accounts, provide sign-in, and keep your trainer profiles available across sessions.
- To create, join, and operate raid rooms, show readiness and invitation progress, enforce room capacity, and prevent repeated or abusive requests.
- To publish only the raid name or friend-listing details you select and to create the sharing preview you request.
- To process a screenshot once and suggest profile values when you choose the optional assisted-entry feature.
- To start checkout, confirm paid access, manage subscriptions, handle cancellations and refunds, prevent payment abuse, and keep required financial records.
- To answer support and privacy requests, investigate safety reports, protect the service, diagnose faults, and meet legal obligations.
- To calculate identifier-free daily totals from necessary account, trainer, friend-listing, raid, purchase, and safety records so we can understand whether core service flows are working. These aggregate reports do not contain an account, email, Trainer Code, profile, room, friend, checkout, purchase, or provider identifier.
- To measure whether key sign-in, onboarding, friend-finder, pricing, and raid flows are understandable, only after you separately enable optional analytics.
- To fund eligible public content with Google AdSense advertising when advertising is available. Advertising is not needed to create an account or use an active paid ad-free benefit.
4. Information you make public
A raid room can display the public raid name and optional gym name you selected. The same values may appear in a link preview when a room is shared. Enter only a public venue name and do not use this field for a home, private meeting place, or information that identifies a person. A public room can appear in discovery. A link-only room is unlisted, but it is not confidential: anyone who receives the bearer link can open, join, and reshare it. Poke.party does not include account IDs, email addresses, Trainer Codes, payment information, precise coordinates, or a private-lobby code in the sharing preview.
If a host enables a private game lobby, its three-Pokémon code is shown only in the authenticated management view for the host and active room members. It is kept in the active room state, excluded from public room detail, discovery, sharing images, queues, and logs, and removed when the room completes, is cancelled, or expires.
A friend listing is published only when you choose to list it. Signed-out visitors can see its public name, country, optional city, language, activity pattern, and purposes. The Trainer Code is returned only to a signed-in visitor. You can remove the listing at any time, and it expires 30 days after publication or refresh.
We remove a public raid-name snapshot when the room lifecycle or account action requires it. A person who already received a link, or a search, messenger, or social network cache, may keep an earlier preview for a limited time outside Poke.party’s control.
5. Service providers and international transfers
Cloudflare provides hosting, security, real-time coordination, private storage, delivery, and optional screenshot analysis. Cloudflare may process information on its global network. For screenshot assistance, Cloudflare treats submitted images and results as Customer Content and states that it does not use that content to train Workers AI models or improve Cloudflare or third-party services without explicit consent.
Creem (Armitage Labs OÜ, Estonia) is the Merchant of Record and contractual seller for purchases. Creem collects checkout contact and payment details, calculates applicable taxes, issues invoices, and processes subscription, refund, and dispute activity under its own Buyer Terms and Privacy Notice.
Google or Kakao processes information when you choose that provider to sign in. Google receives optional Google Analytics measurements only after you enable Google Analytics. When Google AdSense advertising is available on an eligible page, Google and the advertising providers disclosed through the applicable consent message may process device, browser, approximate-location, consent, ad-delivery, interaction, fraud-prevention, and measurement information under the choices available to you.
These providers may process information outside your country. Where required, transfers are supported by the provider’s contractual safeguards, recognized adequacy arrangements, or another lawful transfer mechanism. We review provider access and limit the information sent to what is needed for the selected feature.
We may disclose information when required by law, to protect users or the service, to investigate fraud or abuse, or as part of a business transfer subject to appropriate confidentiality and notice. We do not sell personal information or send Poke.party account, trainer, raid-room, friend-code, or purchase identifiers to GA4 as event properties. Google advertising is separate from optional GA4 product analytics and follows the advertising choices and regional consent controls described below.
6. How long we keep information
When no fixed period applies, we keep information only while it is reasonably needed for the purpose described above, then delete or de-identify it. Backups and provider systems may take additional time to cycle out securely.
- Account and trainer information: while the account is active, then deleted or de-identified through the account-deletion process unless a longer period is required by law or for a dispute.
- Friend listings and Trainer Codes in those listings: 30 days after publication or refresh, or sooner when you unpublish, disable the public name, delete the profile, or delete the account.
- Active friend-listing moderation blocks: while a reviewed restriction remains necessary. If you delete a restricted listing, its public content is deleted but an account, listing, report reference, and timestamps may remain to prevent immediate republication until the restriction is lifted or the account is deleted.
- Trainer screenshots: no Poke.party application-storage period. The image is used for the live analysis request; only profile values you review and save are retained.
- Incomplete uploads: 24 hours. Rejected verification evidence: 7 days. Approved verification evidence: 30 days. Evidence for a closed safety report: 90 days.
- Temporary checkout intents: 30 days after their one-hour checkout window expires.
- Repeated-request results: 72 hours. Pseudonymous room-assignment audit records: 30 days. Temporary privacy exports: 24 hours.
- Analytics-choice cookie and GA4 first-party identifiers: up to 180 days from the latest choice or visit under our configuration. GA4 event-level data is configured for the shortest standard retention period we use, currently two months.
- Advertising cookies, local storage, consent records, and ad-delivery or measurement information: according to the choice you make and the retention controls of Google, the applicable consent platform, and disclosed advertising providers. You can revisit the available privacy choices as described below.
- Purchase, refund, tax, fraud-prevention, and dispute records: for the period required by applicable accounting, tax, consumer-protection, anti-fraud, and legal-claims rules, generally up to five years unless a different period is required.
8. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your information; object to certain processing; withdraw consent; or complain to a data-protection authority. Use the signed-in Privacy & data page or email privacy@1990.company. We may ask you to confirm control of the account before acting.
Account deletion disables access and sessions, removes public raid identity, schedules known subscriptions not to renew, and starts deletion of account-linked data. Some purchase, refund, security, or legal records may remain where retention is required. If you need a refund reviewed, contact support before deleting the account when possible.
9. Age, automated decisions, and security
Poke.party is intended for people aged 18 or older. Do not create an account or publish information if you are under 18. If you believe a person under 18 has provided personal information, contact us so we can review and remove it as appropriate.
Poke.party does not make decisions that produce legal or similarly significant effects solely by automated means. Screenshot assistance only suggests profile values and requires your review before saving.
We use access controls, encryption in transit, private storage, restricted public fields, rate limits, and deletion processes designed to protect information. No online service can guarantee absolute security, so please use a unique email account, protect sign-in codes, and report suspected misuse promptly.
10. Changes and contact
We may update this policy as the service, providers, or law changes. We will update the effective or last-updated date and provide additional notice when a change materially affects your rights or choices. Contact privacy@1990.company for privacy matters or support@poke.party for service and purchase support.