Privacy Policy
Last updated: 2026-05-16
Important notices
- This Privacy Policy applies only to the nuzlockes.gg service available at the domain nuzlockes.gg (including subdomains). Any copies of this document in public source repositories are provided for reference only and are void unless explicitly hosted under nuzlockes.gg.
1. Introduction
Welcome to nuzlockes.gg, a platform for tracking and sharing Nuzlocke and other challenge run records for Pokémon games and ROM hacks. This Privacy Policy explains how we collect, use, and protect your data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
By using nuzlockes.gg, you agree to this Privacy Policy and our Terms of Service.
2. Data We Collect
Anonymous Users
For visitors who browse run records without an account, we may record standard server logs (IP address, browser type, pages visited) for security and performance monitoring. No personally identifiable data is collected beyond what is incidentally included in server logs.
Registered Users (Runners)
When you create an account to submit runs, we collect:
- Email address— transmitted by Discord or Twitch as part of their default OAuth response and retained in Supabase Auth’s internal records. nuzlockes.gg does not read, use, or display your email address for any purpose.
- From Discord — your Discord user ID and Discord username, synced at each sign-in
- From Twitch — your Twitch user ID and Twitch login name, synced at each sign-in
- Profile fields you set yourself: username, display name, pronouns, bio, YouTube URL; and optional visibility toggles for your linked Discord and Twitch handles
Run Submissions
Run records you submit are stored publicly, including: game, category, run status, attempt count, completion date, video proof URL, and Pokémon team data associated with the run.
3. Purpose of Processing
| User Type | Purpose of Data Use |
|---|---|
| Anonymous Users | To monitor service health, prevent abuse, and diagnose technical issues. |
| Registered Users | To create and manage your account; to display your public profile and run history; to authenticate access; to moderate submissions. |
We do not use personal data for marketing, profiling, or advertising purposes.
4. Legal Basis for Processing
We process your data based on:
- Legitimate interest — for anonymous users, to maintain service security and performance
- Contractual necessity — for registered users, to provide account and run-tracking functionality
- Consent — when you voluntarily create an account and accept this Privacy Policy
5. How We Obtain Consent
By creating an account on nuzlockes.gg, you explicitly agree to this Privacy Policy and our Terms of Service. Anonymous users are not required to consent separately since only non-identifiable technical data is used for functionality.
6. Cookies & Local Storage
Cookies
For registered users, we use authentication cookies provided by Supabase. These cookies:
- Are required for login sessions and secure access to account features.
- Are used only for authentication and authorization purposes.
- Are not used for analytics, tracking, or advertising.
Because these cookies are strictly necessary for platform functionality, user consent for them is not required under GDPR Article 6(1)(f).
7. Public Data
Usernames, display names, run records, and any profile information you choose to make public are visible to anyone who visits nuzlockes.gg. Do not submit information you wish to keep private. Run records, once verified and published, may be archived for historical accuracy.
8. Data Retention
- Anonymous Users: Server log data is retained for a limited period for security purposes and cannot be linked back to an individual without additional information.
- Registered Users: Personal data is retained as long as your account remains active or until you request deletion.
9. Data Sharing and Third Parties
nuzlockes.gg uses the following third-party service providers. Each processes user data solely on behalf of nuzlockes.gg and in accordance with GDPR requirements:
| Service | Location | Purpose |
|---|---|---|
| Supabase | Ohio, USA | Authentication, database, and storage |
| Discord | USA | OAuth sign-in only. We store your Discord user ID and username. Discord also transmits an email address as part of its default OAuth response, which is retained in Supabase Auth’s internal records; nuzlockes.gg does not access or use it. |
| Twitch | USA | OAuth sign-in only. We store your Twitch user ID and login name. Twitch also transmits an email address as part of its default OAuth response, which is retained in Supabase Auth’s internal records; nuzlockes.gg does not access or use it. |
nuzlockes.gg does not share or sell personal data to any other third parties.
10. International Data Transfers
Because Supabase servers are hosted in the United States, your data may be transferred outside the European Economic Area (EEA). Supabase applies appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure that your data remains protected and processed lawfully.
11. Security Measures
nuzlockes.gg employs:
- SSL/TLS encryption for all data transmissions
- Restricted database access using Row-Level Security (RLS) and user roles
- Regular internal reviews of access permissions
12. User Rights (Under GDPR)
You have the following rights regarding your personal data:
- Right of access: Request a copy of your personal data.
- Right to rectification: Correct inaccurate or incomplete data.
- Right to erasure: Request deletion of your data.
- Right to restrict processing: Limit how your data is used.
- Right to data portability: Receive your data in a commonly used, machine-readable format.
- Right to object: Object to processing under certain circumstances.
How to exercise your rights
You can:
- Modify your account data directly from the settings page.
- Request data deletion or any other GDPR-related action by emailing us at admin@nuzlockes.gg.
We will respond to all valid requests within 30 days.
13. Children’s Privacy
nuzlockes.gg is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us at admin@nuzlockes.gg so we can remove the data.
14. Updates to This Policy
We may update this Privacy Policy occasionally to reflect platform or legal changes. The “Last updated” date at the top of this page will always indicate the latest version.
15. Contact Information
If you have questions or concerns about this Privacy Policy or how your data is handled, please contact: admin@nuzlockes.gg
GDPR Compliance Statement
nuzlockes.gg is committed to protecting user privacy and ensuring that all personal data is handled in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). We apply appropriate technical and organizational measures to protect personal data, limit access, and maintain transparency in data processing practices.