Privacy

How PokeTCGBot handles the data of people who use the bot on Twitch and the site.

Updated on September 27, 2026

1. Who we are

PokeTCGBot is a fan-made Twitch bot that turns watch time on streams into virtual Pokémon TCG boosters, with a companion site. It's run by a single person (see About me, in the footer), responsible for handling the data described in this policy.

2. What data we collect

Login via Twitch: your username and your Twitch account ID, received through OAuth when you sign in to the site — we never have access to your Twitch password.

Game data: your progress in each community (channel), such as watch time, boosters earned and opened, card collection, community membership, and your profile showcase, always tied to your Twitch ID and username.

Gym leader request: if you request to activate the bot on your channel, we store your display name, your Twitch login, the email on your login account, and how you heard about the project, only to review the request and reply to you about it.

Cookies: a technical cookie that keeps your session signed in, and a cookie with your chosen language. Neither one tracks you outside of PokeTCGBot — see the Cookie Policy for details.

Usage metrics: the site uses Vercel Web Analytics and Speed Insights, which count page views in an aggregated, anonymous way, without cookies and without identifying who visited.

We don't collect your password, payment details, or documents: PokeTCGBot doesn't sell anything or process payments, and login is handled entirely by Twitch, which has its own privacy policy.

3. What we use this data for

Keeping your progress (boosters, collection, communities) between sessions.

Authenticating you on the site and showing your information on profile, collection, and community pages.

Generating rankings and public pages, such as the total number of collectors and the biggest communities.

Reviewing gym leader requests and letting whoever asked know about the approval or rejection.

Keeping the bot running on active channels: counting watch time, drawing boosters, and responding to chat commands.

4. Who we share it with

We don't sell or share your data for marketing purposes. The only third parties involved are providers needed to run the service:

Twitch — login, chat, and reading who's watching the stream, to count watch time.

Supabase — database, authentication, and hosting for your data.

Vercel — hosting the site and the anonymous usage metrics.

TCGdex — card images, loaded directly by your browser; we don't send them any of your data.

Google (Gmail) — sending the automated emails for gym leader requests and approvals, only to whoever requests bot activation.

5. Where the data is stored

In Supabase's database, on cloud infrastructure. We don't use advertising pixels, and we don't sell or share data with ad networks.

6. Your rights

You can delete your account and all your data at any time, right from the site, under Settings → Account → Delete my account — deletion is immediate and permanent, with no need to ask anyone. For access, correction, or any other question about your data, write to contact@poketcgbot.com.

7. Minors

Use of the bot and the site follows Twitch's own minimum age policy.

8. Changes

We may update this policy; relevant changes will be announced in What's new.