TopDex

Privacy Policy

Last updated: March 7, 2026

Overview

TopDex ("we", "us", "our") is a community platform for tracking Pokémon TCG Pocket tournament results and ranked match play. This policy explains what data we collect, how we use it, and your rights regarding that data.

Data We Collect

Account Information

When you create an account, we collect your email address and the display name you choose. You may optionally provide your Pokémon TCG Pocket in-game name and a short bio.

Match & Tournament Data

We record match results, ELO ratings, reputation scores, and tournament placements. This data is publicly visible on leaderboards and player profiles.

Usage Data

We collect standard server logs (IP address, browser type, pages visited) to maintain and improve the service. We do not use third-party analytics or tracking scripts.

How We Use Your Data

  • Authenticate your account and maintain your session
  • Display your profile, stats, and rankings on public leaderboards
  • Match you with opponents and process match results
  • Calculate and update your ELO rating and reputation score
  • Send real-time notifications about challenges and match events
  • Enforce fair play through the reputation system

Data Storage & Security

Your data is stored in a Supabase-hosted PostgreSQL database with row-level security (RLS) policies. Authentication tokens are stored as HTTP cookies with appropriate expiration and SameSite attributes.

Passwords are never stored in plain text. Authentication is handled entirely by Supabase Auth, which uses industry-standard bcrypt hashing.

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your display name, match history, ELO rating, and reputation score are publicly visible as part of the platform's core functionality (leaderboards, player profiles, match results).

Your email address is never displayed publicly.

Cookies

We use essential cookies only — specifically authentication tokens (sb-access-token and sb-refresh-token) to keep you logged in. We also store your theme preference and sidebar state in localStorage.

We do not use advertising cookies, tracking cookies, or any third-party cookie services.

Your Rights

  • Access: You can view all data associated with your account on your profile and account settings page.
  • Correction: You can update your display name, in-game name, and bio at any time from your account settings.
  • Deletion: You may request account deletion by contacting us. This will remove your account and personal data. Match history may be retained in anonymized form for leaderboard integrity.

Children's Privacy

This service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.