PackDex legal
Privacy Policy
Learn how PackDex handles account, collection, app, sharing, advertising, technical, and privacy-choice information.
Last updated: August 12, 2026
This Privacy Policy explains how PackDex handles information when you use the PackDex website, web application, or native mobile application.
PackDex is a fan-made, unofficial Pokémon TCG pack-opening simulator and collection-tracking service. It is not affiliated with or endorsed by Nintendo, Creatures, GAME FREAK, or The Pokémon Company.
Information you provide
If you create an account, Supabase processes your email address, password, authentication tokens, and account identifier to provide authentication. PackDex does not store your password in its application database in readable form.
Depending on the features you use, PackDex may process virtual collection and binder records, wishlist entries, simulated pack-opening history, profile statistics, achievement progress, welcome-reward state, application preferences, support communications, and account-deletion requests. PackDex does not ask for payment details, a postal address, or a phone number.
Information generated through use of PackDex
Using PackDex can generate records about simulated packs, virtual cards added to a collection, binder organization, wishlist activity, achievement progress, aggregate statistics, preferences, public pull shares, and security or abuse-prevention events.
Simulated cards, pulls, achievements, statistics, and collection records are virtual records only. They do not represent a purchase or ownership of physical cards.
Technical information
PackDex and the providers used to operate it may process technical information such as IP address, browser or device type, operating system, app version, referring page, approximate region inferred from an IP address, request timestamps, basic interactions, security or fraud signals, and error, performance, or diagnostic information.
PackDex does not currently use a dedicated analytics, behavioral-profiling, or crash-reporting SDK. Hosting, database, security, and other infrastructure providers may still create operational logs needed to deliver and protect their services.
Cookies, local storage, and similar technologies
PackDex uses browser or device storage for authentication and session continuity, security, guest collections and binders, pending synchronization, preferences, interface settings, recent in-app activity, and other core application state. Authentication libraries and service providers may also use storage needed to maintain a secure session.
This essential storage supports core functionality. The web version may also use advertising-related cookies or similar technologies when advertising is served, subject to applicable privacy and consent requirements. Disabling or clearing essential storage may sign you out or remove locally saved guest data and preferences.
How PackDex uses information
- Provide authentication and account recovery.
- Save and synchronize virtual collections, binders, wishlists, statistics, achievements, and preferences.
- Generate, display, and protect public pull-sharing links.
- Provide card information and estimated pricing features.
- Respond to support, privacy, and account-deletion requests.
- Maintain reliability, investigate errors, enforce limits, and protect PackDex from abuse.
- Comply with applicable legal obligations and enforce PackDex policies.
Advertising and Cookies
PackDex may use Google AdSense to display advertising on eligible content pages in the web version of the service. Google and its advertising partners may use cookies, web beacons, IP addresses, advertising identifiers, or other technologies to serve, personalize, measure, and report advertising, subject to applicable privacy and consent requirements.
Depending on your location, applicable law, and consent choices, advertising may be personalized or non-personalized. Google and its advertising partners control their own data practices under their respective policies; PackDex does not control how those third parties process information.
PackDex does not sell virtual cards. Cards and other virtual records obtained through the simulator have no cash value and cannot be redeemed for physical products, physical cards, money, or prizes.
PackDex's native Android and iOS builds do not currently load browser AdSense or use a native Google AdMob implementation. Advertising availability and consent controls may therefore differ between the web version and native applications.
For more information, see Google's advertising privacy information.
Privacy Choices
PackDex provides a Privacy Choices control with information about available privacy and advertising choices. The PackDex control is not itself a certified consent-management platform and does not replace consent choices that may be presented through a Google-certified consent-management flow where required.
Available controls may vary by region, platform, applicable law, advertising availability, and whether you use the website or a native app.
Third-party services
PackDex relies on third parties that may process information under their own terms and privacy practices. Confirmed services include Supabase for authentication, databases, and server functions; Cloudflare for deployed web routing, delivery, security, and Turnstile abuse prevention; Google-hosted fonts and Gmail-based support communications; the Pokémon TCG API for server-side card and pricing data; and TCGplayer for pricing references and outbound marketplace links. Google AdSense may provide advertising on eligible web content when configured.
PackDex also links to external social, video, and marketplace services. PackDex does not control those services, their availability, their content, their privacy practices, or transactions made through them. A link or advertisement does not imply PackDex's endorsement.
Public pull sharing
When you create a public pull share, PackDex stores a randomly generated share code, the set identifier, card identifiers, an optional pack number, and creation and expiration timestamps. The public share record does not include your email address or account identifier. Separate IP-address and, when signed in, account-based rate-limit records may be processed to prevent abuse.
Anyone with a valid link can view the shared simulated pull. Share links are configured to expire after one year and may be removed, disabled, or become unavailable earlier. Because public shares are not linked to an account in the public-share record, deleting an account does not necessarily remove an existing share before its separate expiration.
Card prices and third-party links
Card prices are informational estimates based on third-party data. They may be incomplete, delayed, inaccurate, or unavailable, and PackDex does not guarantee a card's market value.
Marketplace links lead to services PackDex does not control. You are responsible for evaluating external listings, sellers, transactions, and risks before acting on third-party information.
Data retention
Account information may be retained while your account remains active and as needed to provide PackDex, maintain security, resolve disputes, comply with law, or enforce policies. Retention varies by data category and provider. Deleted information may remain temporarily in backups, security records, or operational logs before it is removed through normal provider processes.
Public shares and rate-limit records follow separate retention behavior. Public shares are configured with an expiration, while providers may retain their own operational records under their policies.
Account deletion and your controls
Signed-in users can initiate account deletion from Settings or the account area. The deletion process removes the Supabase authentication user and account-owned PackDex application records, then clears identified PackDex account state from the device used for the request. Some information may remain temporarily in backups or operational logs, and public shares have separate expiration behavior.
You can update available application preferences in PackDex. You may contact support to ask about access, correction, deletion, or other privacy concerns. Your privacy rights and available controls may vary depending on where you live.
Children
PackDex is intended for a general audience. Users should create an account only when they are legally permitted to do so, and a parent or guardian should review the service when required by applicable law. If you believe personal information from a child should be reviewed or deleted, contact PackDex support.
Security
PackDex uses reasonable technical and organizational safeguards intended to protect account information, including authentication, access controls, and abuse-prevention measures. No online or device-based system can guarantee absolute security. Protect your credentials and contact support if you believe your account has been compromised.
International processing
PackDex's service providers may process information in countries other than the country where you live. Privacy and data-protection rules may differ between those locations.
Changes to this policy
PackDex may update this Privacy Policy as the service, providers, or legal requirements change. The last-updated date shown on this page will be revised when the policy changes.
Contact
For privacy questions or requests, contact PackDex support at packdexsupport@gmail.com.
Fan-made project and intellectual property
PackDex is fan-made and is not affiliated with or endorsed by Nintendo, Creatures, GAME FREAK, or The Pokémon Company. Pokémon names, artwork, card images, logos, and trademarks belong to their respective owners. PackDex does not claim ownership of those materials.