Privacy Policy

Who this policy covers

Operated by Pretty Okay. Pretty Okay VGC is an independent Pokémon Champions battle-planning tool. Contact the operator at PrettyOkayPrints@gmail.com. This policy applies to the web app at prettyokayvgc.com and its account, community, import, support, and calculator features.

The downloadable Windows edition keeps its working data on that computer. Features that open an external link or email app remain subject to the service you choose to use.

Information we handle

Account and sign-in information

If you create an account, our authentication provider, Clerk, handles sign-in. Pretty Okay VGC stores an internal account identifier, your verified email address, your chosen handle and display name, profile avatar choice, visibility settings, and timestamps. When available, a name or username from sign-up may be used once to initialize your Pretty Okay VGC profile.

Clerk handles passwords, password recovery, sessions, and connected sign-in providers. Pretty Okay VGC does not store your password. Google and Discord are optional sign-in methods; using one does not give Pretty Okay VGC access to your password on that service.

Saved battle-planning content

When you deliberately save to an online account, we store the saved Pokémon sets, teams, calculation scenarios, labels, Regulation snapshot, privacy choice, timestamps, and revision information needed to keep those saves consistent. Current account limits are shown in the product.

Device-only information

The app uses browser storage for preferences and local work, which can include theme, guest choice, draft and saved teams, Pokémon sets, match history and notes, calculator workspaces, account-synchronized caches, pending saves, restore points, recoverable trash, and data-safety state. This information normally remains in that browser unless you choose an account save, export, share, remote import, or another feature that clearly sends data elsewhere. Signing out does not automatically erase every account-scoped cache from that device.

Photos, imports, diagnostics, and messages

• Photo import: supported team screenshots are read in your browser for text recognition. The app does not upload those images to a Pretty Okay VGC server.
• Link import: when you ask to import a PokéBase or Pokepaste link, the hosted app first runs a Cloudflare Turnstile security check and then contacts that service to retrieve the requested team. Turnstile may process browser, device, interaction, and network information needed to distinguish people from automated abuse. Pretty Okay VGC sends the resulting single-use token to Cloudflare for verification and does not retain that token. The app also temporarily stores a one-way keyed digest of the network address supplied by its Cloudflare infrastructure, along with a short request counter and expiry; it does not write the raw network address to this limiter. File, pasted-text, JSON, photo, and Windows-loopback imports do not use Turnstile.
• Diagnostics: the copyable diagnostic report is designed to exclude account IDs, email addresses, team contents, sets, match notes, opponent names, tokens, and saved-data values.
• Support: Report a Bug and Contact Us prepare a draft in your email app. Nothing is sent merely by opening the form; your chosen email provider sends it only after you review and send it.
• Routine technical data: hosting, security, and authentication providers may process IP address, browser and device details, request times, referring pages, cookies, and error or security events needed to deliver and protect the service.

Cookies and similar storage

The current advertising consent integration supports the European consent flow for the European Economic Area (EEA), United Kingdom, and Switzerland only. It does not support serving ads in the United States or other regions outside that flow. US privacy-signal handling is being tested; a missing signal, an opt-out, or an unverified privacy framework never enables advertising. Live ads remain disabled everywhere.

How we use information

• Authenticate you, keep your account secure, and connect the correct account library.
• Save, load, update, export, delete, and share the battle-planning content you request.
• Show your public profile and public saves when your visibility choices allow it.
• Maintain quotas, prevent conflicting writes, investigate failures, and protect the service from abuse.
• Answer messages you choose to send and improve features based on bug reports or suggestions.
• Meet legal obligations and enforce the Terms of Use.

Exactly what Google sign-in does

If you choose Continue with Google, the sign-in flow requests only basic identity information needed to create and authenticate your account: an account identifier, name or profile details, and email address. Clerk processes the sign-in and provides Pretty Okay VGC with the verified identity information needed for your account.

Pretty Okay VGC does not request access to Gmail, Google Drive, Contacts, Calendar, photos, payment information, or other Google product data. We use Google identity data only for account access, security, and initial profile setup; we do not sell it, use it for advertising, or disclose it except to providers needed to operate and secure the service or when legally required.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

When information is shared

We disclose information only as needed to provide the service, honor your public-sharing choices, protect people and the service, comply with law, or complete a business transition with appropriate safeguards. Current provider categories include:

• Clerk for account authentication, sessions, password recovery, and connected login methods.
• Google or Discord when you choose that provider to sign in.
• Google AdSense Privacy & messaging for the privacy-choice controls on HP Breakpoints. These are separate from Google sign-in and do not receive your account library from Pretty Okay VGC. See Google's Privacy Policy.
• OpenAI Sites and Cloudflare infrastructure for web delivery, encrypted connections, security, database hosting, rate limiting, and Turnstile verification for hosted team-link imports.
• Your email provider and ours when you choose to send a support or privacy message.
• PokéBase or Pokepaste only when you ask the app to retrieve a team from a link on that service.

Those providers process information under their own terms and privacy notices. Pretty Okay VGC does not authorize them to use account or save contents for our independent marketing.

Public profiles and private work

New profiles, Pokémon saves, and team saves currently default to Public. Public profile information and public saves can be viewed by other visitors and may be copied or indexed. A public team can include its full builds, nicknames, items, moves, Stat Points, labels, team notes, and timestamps. Your verified email, password, connected accounts, private records, calculation scenarios, match history, and device-local work are not placed on your public trainer page.

You can make the full profile Private or change an individual Pokémon or team between Public and Private. A Private profile hides all of its saves even if an individual save still has a Public choice. Making the profile Public again restores each save's existing individual choice.

How long information is kept

Cloud account records and saved content are retained while your account is active or until you delete them. Self-service account deletion first makes the profile and every public save Private, removes the sign-in identity, and deletes the active profile, Pokémon, teams, and calculator scenarios. A one-way deletion receipt that contains no email address or save contents is retained for up to 90 days after cleanup completes so a stale session cannot recreate the deleted account. A deletion that is still being safely reconciled remains Private and write-blocked until cleanup completes.

The keyed network digest rotates with its short rate-limit window. An expired bucket cannot affect access and may be removed during a later protected request. Turnstile responses are single-use and are not stored by Pretty Okay VGC after verification.

Completed encrypted account backups are normally retained for 60 days, and incomplete backup objects for up to seven days. Privacy-safe application and request logs use the shortest provider-supported period that still permits incident response, with a target of 30 days or less. Bug and support messages are normally removed 90 days after resolution and no later than one year unless an active security, legal, or support need requires longer retention. Provider disaster-recovery and security systems may use their own limited schedules and are not used as active account data.

Device-only data remains until you delete it in the app, clear that browser's storage, remove the app's files, or replace it during a restore. Deleting an account also clears that account's scoped workspace from the browser used for the deletion; downloaded files and other browser profiles remain under your control.

We use HTTPS, provider-managed authentication, origin checks, authorization checks, record ownership checks, and restricted server-side credentials. No internet service can promise absolute security, so use a unique password and protect access to your email and connected providers.

Access, correction, export, and deletion

• Use Privacy choices in the HP Breakpoints footer to reopen Google's available consent message and change or withdraw your choices. Advertising stays paused while you review them. If the controls cannot load, consent is unknown, or an applicable privacy framework has not been verified, this integration does not enable ads.
• Edit your display name, handle, avatar, and profile visibility from Account & Privacy.
• Change a saved Pokémon or team between Public and Private, or delete it from your account library.
• Use the Library backup tools to export and restore supported device-local data.
• Manage passwords, sessions, and connected sign-in methods through the secure account controls powered by Clerk.
• Download a complete JSON copy of the active cloud profile, Pokémon, teams, scenarios, visibility choices, revisions, and timestamps from Account & Privacy. Device-local history and work remain available through the separate Data Safety backup.
• Delete the full Pretty Okay VGC account from Account & Privacy after typing the explicit confirmation. The control makes public content unavailable before it removes the sign-in identity and active cloud data.
• Ask for access, correction, or deletion help by emailing PrettyOkayPrints@gmail.com. We need to verify that a request involving an account comes from its owner.
• Revoke Google account access from your Google Account permissions. Revoking one sign-in connection does not by itself delete the Pretty Okay VGC account or content; use the in-app account-deletion control if you also want deletion.

Not directed to children under 13

Account features are for people age 13 or older. If local law requires a higher age or permission from a parent or guardian, that requirement must also be met. Pretty Okay VGC is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child provided personal information, contact us so we can investigate and delete it.

Policy updates and questions

We may revise this policy when the app, providers, or legal requirements change. The effective date at the top will change when a revision is posted. Material changes may also be highlighted in the app.

Questions, access requests, and deletion requests can be sent to PrettyOkayPrints@gmail.com. Please do not email passwords, recovery codes, provider secrets, or private team contents unless they are necessary to resolve your request.