Policy · Privacy
Privacy
Everything the shop keeps about you, written plainly. We keep only what an order needs, and we never ask for your Pokétwo or Discord login.
What we store
| What | Why | Kept |
|---|---|---|
| Your username and password | To sign you in. The password is stored only as a salted PBKDF2 hash; nobody, including us, can read it. | While the account exists |
| Your orders: amount, payment method, Market ID, price shown, status and times | To deliver them, answer questions and keep business records | While the shop operates |
| Your email, if you give one | Receipts and delivery notes; event, code and restock emails unless you switch them off | Until you remove it |
| Support messages | To answer you | While the account exists |
| Level, XP and badges | The trainer pass and its rewards | While the account exists |
| How your profile looks: partner, colour, title, a one-line “about you”, badges in front, shiny partner | To show your profile the way you set it. Only if you turn on “Share my trainer card” can anyone with its link see your name, partner, colour, title, line, level, badges in front, badge count and how many orders were delivered. Never your email or order details. The shop can remove a line or stop the sharing | Until you change it; sharing until you turn it off |
| An email left for the reopening note | When orders are paused, to email you once they open again. The shop may also answer you at that address about reopening | Until that email is sent, or until you ask us to remove it |
| Your country | Read from your connection: a count of visits per country, and the country on your account and orders, so we know where trainers are. Never your IP address | Visit counts as daily totals; on an account or order while it exists |
| Notes from the shop | A short note the shop may keep on an account to remember something about its orders, such as a delivery problem. Only the shop sees it | While the account exists |
| Your IP address | Briefly, to slow down abuse (too many sign-ins or orders) | Minutes to an hour; a password-reset request keeps it for 7 days |
We never ask for, receive or store your Pokétwo or Discord password, tokens or authorisation, and we never see card details: you pay inside PayPal, Cash App, your UPI or PIX app, or your crypto wallet.
What your browser keeps
The site stores a few things in your own browser's local storage: your signed-in name and session, your chosen currency, your recent orders for quick display, display preferences, and which hidden pumpkins you have found during a Halloween hunt. Clearing your browser data removes them. We do not use advertising or tracking cookies.
Who processes it
- Cloudflare hosts the site, the API and the database, and delivers mail to the shop owner.
- Resend sends the emails that go to customers.
- Discord receives a notification for the shop owner when an order is placed (username, amount and Market ID).
- CoinGecko and Coinbase provide exchange rates; our server asks them, and if that fails your browser may ask them directly.
- Google Fonts and Pokémon Showdown serve the fonts and Pokémon images the pages show, so your browser contacts them when loading a page.
We do not sell or share your information with anyone else.
Every event or restock email has a one-click unsubscribe link, and you can switch them off any time in Settings in your profile menu. Receipts for orders you place are sent regardless, because they are about your own order.
Seeing, changing or deleting your data
You can change your username, email and password yourself in the profile menu. To get a copy of what we hold, or to have your account deleted, contact us. Orders are kept as business records even after an account is deleted, with the email removed.
Copies of the database are kept for 30 days for recovery, email logs for 14 days, error logs for 7 days, and the owner's action log for a year.
Contact
Questions about any of this: email contact@poketwo.store, or message not.your.renji on Discord. Signed-in trainers can also write from the Support tab in their profile menu.