PokeSynergy Privacy Policy

This Privacy Policy explains how Scoriox, ABN 31 525 890 100, handles information when you use PokeSynergy's local team builder, create an account, choose profile settings, use cloud backup or sync features, import or export teams, visit the site, or interact with support/community channels.

PokeSynergy is designed to be local-first. You can build and manage teams in your browser without creating an account. Account features are optional and add identity, profile, backup, sync, and future account-only features.

The app may store teams, notes, selected Pokemon, moves, items, abilities, stat settings, team order, UI preferences, account-display fallback data, and cloud-id mappings in your browser storage.

Local browser data stays on your device unless you export it, share it, clear your browser storage, or choose an account/cloud feature that sends selected data to Scoriox infrastructure. Signing in or signing out does not delete local teams.

If you create an account, Scoriox may store app profile data such as display username, battle format preference, trainer avatar, partner Pokemon, profile image framing, consent records, marketing preference, and account metadata needed to connect your app profile to your authenticated login.

Authentication is handled by Clerk and supported identity providers. Scoriox receives account identifiers and basic profile/contact information needed to operate the account experience, but does not store social-provider OAuth access tokens or refresh tokens in app-owned team/profile records.

Google sign-in is optional. If you choose it, Google provides basic identity and profile information to Clerk for authentication, such as your email address, whether it is verified, and a profile photo when available. Clerk supplies PokeSynergy with an authenticated account identifier and available email, verification, and image claims. PokeSynergy uses these to sign you in, link your app profile to your login, display your account image, and contact you about account or security matters. PokeSynergy does not use Google sign-in to access Gmail, Drive, Calendar, Contacts, or other Google product content.

Clerk processes the sign-in and provider credentials. PokeSynergy stores the account identifier, email address, email-verification status, and profile image URL when supplied in its Convex app profile, together with your app profile choices and consent records. PokeSynergy does not store Google OAuth access or refresh tokens in app-owned team or profile records or use them to call Google APIs. Clerk and Convex process this information to provide authentication and account features. PokeSynergy does not use Google sign-in identity claims for aggregate recommendations or marketing, or give them to Google AdSense for ad targeting. Signing in does not opt you in to marketing email.

App-owned account information is kept while you use account features, subject to the deletion controls and the limited security, recovery, or legal exceptions described below. The account settings' Delete account data control removes app-owned profile, consent, and cloud data and signs you out; it does not delete your Clerk authentication identity, revoke your Google connection, or erase teams stored in your browser. You can remove PokeSynergy's Google connection separately in your Google Account's third-party connections. Revoking that connection alone does not delete app-owned records. For help deleting remaining authentication information or making a privacy request, contact scorioxyt@gmail.com.

If you choose cloud backup or sync, Scoriox may store versioned copies of selected teams, notes, local team ids, cloud team ids, timestamps, deletion markers, and schema metadata in Convex or another app backend.

Cloud sync is intended to be additive to local storage. If local and cloud copies conflict, the app should preserve both practical choices and ask you to resolve the conflict instead of silently overwriting one side.

Scoriox may use Vercel Web Analytics or similar privacy-conscious analytics to understand page views, app screens, high-level navigation, performance, and aggregate usage patterns.

Analytics should not read, clear, migrate, or rewrite saved teams or account data. The app may send virtual pageview paths for important internal screens such as team views, picker flows, account dialogs, and calculators.

If advertising is enabled, PokeSynergy may use Google AdSense to show one or two manually placed advertisements on eligible desktop Team Builder, saved Teams, main MetaDex, and SynerDex layouts. Ads are not shown on mobile or narrow layouts, and users whose Mega entitlement is detected are excluded.

Google and its advertising partners may process device and browser information, IP address, page and ad interactions, identifiers, and cookies or similar local-storage technologies to deliver, limit, measure, secure, and report advertising. Depending on your location and choices, ads may be personalized, non-personalized, or limited.

Advertising information may be shared with or collected directly by Google and its advertising partners under their own privacy terms. Before enabling ads in regions requiring consent, PokeSynergy must provide an appropriate consent message and a way to revisit advertising privacy choices. Advertising requests must respect those choices; browser controls may also restrict cookies or similar storage.

The initial pilot uses one named ad unit; a separately enabled layout may use two named units. PokeSynergy uses Google-provided reporting and does not add custom advertising telemetry or refresh ad units on a timer or within a page. Entering an ad-supported MetaDex or SynerDex workspace on an eligible desktop may load a new page and request new ads.

MetaDex may collect, store, analyze, and republish publicly available tournament information from third-party tournament sources, including event names, dates, standings, player display names, country codes, records, teams, Pokemon, items, abilities, moves, and source links.

This tournament data is used to provide public metagame analysis, rankings, team pages, historical trends, abuse prevention, quality checks, and source attribution. Tournament players who want a correction, removal, or other privacy request can contact Scoriox using the contact details in this policy.

Player keys used to match scraped records are internal operational identifiers and should not be shown in public app responses.

Scoriox uses information to provide the app, authenticate accounts, preserve preferences, back up and sync selected teams, show profile features, troubleshoot bugs, protect the service, maintain consent records, improve product decisions, develop recommendations and insights, test future features, and comply with legal obligations.

Scoriox may use de-identified or aggregated app data for features and analysis that are not tied only to your account, such as aggregate product analytics, quality checks, matchup trends, recommendation improvements, and future PokeSynergy tools.

Marketing email is separate from account email. Scoriox will not treat account creation or email verification as permission to send promotional email.

Scoriox may share information with service providers that operate authentication, hosting, databases, analytics, advertising, email delivery, security, error handling, and support workflows. These providers may process information only as needed to provide their services.

Scoriox may also disclose information when required by law, to protect users or the service, to investigate abuse, or as part of a business transfer such as a merger, acquisition, or asset sale.

Local browser data remains on your device until you delete it, clear browser storage, use app deletion controls, or replace it through normal app actions.

Account deletion should provide a path to delete the app profile, cloud teams, consent records, and account-owned app data where supported by the relevant authentication provider and infrastructure. Some records may be retained briefly where needed for security, recovery, legal compliance, or abuse prevention.

Scoriox uses reasonable technical and organizational measures to protect account and cloud data, including server-side ownership checks for account-backed records.

No online service or browser storage mechanism is perfectly secure. Keep your login method secure and avoid storing sensitive personal information inside team names, notes, exports, or imported sets.

You can use the core team-building loop without an account. You can decline marketing email, sign out without deleting local teams, export local data where app tools support it, delete account-backed app data where controls support it, and choose which local teams to sync when limits apply.

Browser controls may let you limit cookies or similar storage and block certain analytics or advertising behavior, but clearing browser storage can remove local teams and preferences from that device. Advertising consent controls must be available where required before advertising is enabled.

PokeSynergy is not intended to collect personal information from children below the age required for consent in their location. If you believe a child provided account information without appropriate permission, use the official contact channel published by Scoriox or PokeSynergy.

Scoriox may update this Privacy Policy as features, providers, data flows, laws, or business needs change. Material updates should be presented in the app or on the site before they apply to account features.

Privacy questions should be sent to scorioxyt@gmail.com or through another official contact channel published by Scoriox or PokeSynergy. Before a broad public launch or paid plans, this Privacy Policy should be reviewed by qualified legal counsel and updated with the final contact address, regional privacy disclosures, and data-subject request process.