Privacy Policy

Who we are

Nuzlocked (https://www.nuzlocked.io) is a fan-made web app for tracking group Nuzlocke runs. It is operated by the project maintainer (jawn). This policy describes what we collect and how we use it today. It is not a substitute for formal legal advice.

What we collect

Depending on how you use the site, we may process:

• Discord or Google account basics from OAuth when you sign in (for example provider user id, username or email, and avatar URL). We do not receive your Discord or Google password.
• Account and session data needed to keep you signed in (Auth.js session cookies and linked account records).
• Profile and run data you enter, such as trainer nicknames, board entries, badges, graves, notes, uploads you choose to add, org/season membership, and related season activity.
• Ask questions and answers when you use Gomi / Ask on a season that has it enabled (question text, a compact season snapshot, and the model reply, stored for operations and ratings).
• Play files you upload, such as emulator save states and optional ROM vault copies. Vault copies stay scoped to your account. A season-public live .srm can be downloaded by other members of that season.
• Technical logs that hosting and application platforms may retain (for example request metadata used for reliability and abuse prevention).

How we use it

We use this information to:

• Authenticate you and maintain your session
• Show trainer boards, season tools, and GM features
• Support org/season membership and invite flows
• Answer optional Ask questions with Google Gemini
• Operate, debug, and protect the service

We do not sell personal data.

Analytics

The site uses Vercel Web Analytics for aggregate pageview and traffic metrics, and Vercel Speed Insights for performance timings. Both are first-party Vercel products oriented toward privacy-friendly metrics rather than advertising pixels. We do not use a separate third-party ad tracker today.

Cookies and local storage

• Session cookies keep you signed in after Google or Discord OAuth.
• Local preferences such as theme, sprite style, GM view, and sound settings may be stored in your browser (cookies or local storage) so they persist across visits.

Essential cookies are required for login and security. Preference storage is optional in the sense that the site works without changing those toggles. We do not currently show a separate cookie consent banner; this section is the disclosure for those mechanisms.

Sharing and processors

We rely on named service providers to run Nuzlocked: Vercel hosts the app, Vercel Web Analytics and Vercel Speed Insights record aggregate pageviews and performance, Vercel Blob stores play files you upload, and Neon Postgres stores account and run data. Discord and Google handle OAuth sign-in.

When Ask is enabled for a season, question text and the compact snapshot are sent to Google Gemini through Google AI Studio. That integration uses AI Studio's free (unpaid) tier, so prompts and replies may be subject to Google's unpaid-service data-use terms, including possible use to improve Google's models.

A Game Master may also configure a Discord webhook so season activity (for example deaths or badges) is posted to a Discord channel they control. Those messages go to a destination outside this application's control. Discord then processes that channel according to Discord's terms and the server owner's settings.

An org API token can read the same spectator-visible season data as the site.

If an organization links the official Nuzlocked Discord app to a Discord server, its slash commands can post that same spectator-visible season data into that server. This is not a new category of data, and hidden trainer boards stay hidden.

Retention and deletion

We keep account and run data while your account is active and the season records remain part of the service. Ask logs older than 90 days are deleted automatically. Error events older than 30 days are deleted unless a feedback ticket still points at them. Gameplay event history is kept indefinitely for season history.

You can delete your own product account from Account by typing your handle (or account id) and choosing Delete account. Season trainer boards stay in season history, unclaimed. ROM vault files and your custom avatar are removed. That user's Ask logs are deleted. Gameplay events stay in the season history with the actor field cleared so the event itself remains. If you cannot sign in, contact the operator and describe the Discord or Google account involved.

Children

Nuzlocked is not directed at children under 13. Do not use the service if you are under 13.

Changes

We may update this policy when the product or our practices change. The "Last updated" date at the top will change when we do. Material updates may also be noted in the app.

Contact

Privacy questions and deletion requests: contact the operator at https://www.jawn.codes/. Copyright takedown notices belong on the Copyright / DMCA page. Related pages: Terms of Service and About.