1. What we collect
When you create an account and use League Dex, we store:
- Account details: your name, email address, and a securely hashed version of your password. We never store the password itself.
- League content: the leagues you create or join, your trainer name, team name, uploaded team logos and banners, draft picks, rosters, trades, reported match results, and messages you send in league chat.
- Session information: a login cookie so you stay signed in, plus the IP address and browser type attached to that session for security.
- Anonymous usage analytics: page views and basic performance data via Vercel Analytics. This is aggregated and does not use cookies or identify you personally.
We do not collect payment information (there is nothing to pay for), precise location, contacts, or anything from your device beyond what your browser sends with every request.
2. How we use it
- To run your leagues: drafts, schedules, standings, trades, and chat.
- To show your name, trainer name, and team to the other members of your leagues.
- To keep you signed in and protect accounts from unauthorized access.
- To understand which parts of League Dex are used so we can improve them.
- To respond when you contact us.
We do not sell your personal information, use it for advertising, or share it with data brokers.
3. Who can see your information
Members of a league can see each other's name, trainer name, team, roster, results, and messages in channels they belong to. Direct messages are visible only to the two people in them. Your email address is never shown to other users.
A league's commissioner can see everything in that league, including chat. If a league is marked public, its name and team list may be visible to signed-in users browsing leagues to join.
4. Service providers
League Dex runs on infrastructure from a small number of providers who process data on our behalf and are not permitted to use it for their own purposes:
- Vercel hosts the app, stores uploaded images, and provides anonymous analytics.
- Neon hosts the database where account and league data lives.
- PokéAPI supplies Pokémon data and sprites. Requests to it are made by our servers, not your browser, so it does not receive your information.
We will disclose information if required by law or to protect the safety of our users or the service.
5. Cookies
League Dex uses only strictly necessary cookies: the session cookie that keeps you signed in. There are no advertising or cross-site tracking cookies, which is why you don't see a cookie banner.
6. Notifications
If you allow browser notifications, we use them only to tell you when it's your turn to pick in a draft. The permission lives in your browser and you can revoke it at any time in your browser settings. We do not use it for marketing.
7. How long we keep it
We keep your account and league data for as long as your account exists so your leagues keep working. When you delete your account (see below) your personal data is removed right away. Backups made by our hosting providers age out automatically within 30 days.
8. Your choices and rights
- Edit: you can change your trainer name, team name, and images from inside each league.
- Delete: you can delete your account from the bottom of your dashboard. This removes your name, email, password, sessions, chat messages, trade listings, and memberships. Teams you managed stay in their leagues so your opponents' records still make sense, but they are no longer linked to you and your trainer name is cleared. Leagues where you are the only member are deleted with your account.
- Export or ask questions: email support@leaguedex.com and we will send you a copy of your data or answer any question about it.
If you live in the European Economic Area, United Kingdom, California, or another region with privacy laws, these rights (access, correction, deletion, portability, and objection) apply to you and you can exercise them using the methods above. We do not discriminate against anyone for exercising them.
9. Children
League Dex is not intended for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child has created an account, contact us and we will delete it.
10. Security
Passwords are hashed, connections are encrypted with HTTPS, and database access is restricted to the app. No system is perfect, so please use a unique password and tell us right away if you think your account has been compromised.
11. Changes
If this policy changes in a way that matters, we will update the date at the top and let you know in the app. Our Terms of Service explain how changes to our agreements work.
12. Contact
Privacy questions or requests: support@leaguedex.com.