Privacy and Cookie Policy
Last updated: September 2026
1. Data Controller
The controller of your data is the publisher of PokeSnoop, identified in the legal notice. For any question about your data: contact@pokesnoop.com.
2. Data Collected and Purposes
User account: email address, password (stored only as an irreversible hash), or Google identifier and profile picture if you sign in with Google, subscription plan, sign-up date and last activity date. Purpose: create and secure your account and give you access to the service. Legal basis: performance of the contract (Terms of Use).
Use of the service: saved searches (keywords, price ranges, platforms), detected listings and their status (seen, dismissed), alert settings and Discord webhook URL if you configure one, tutorial progress. Purpose: provide the search and alert service. Legal basis: performance of the contract.
Security: server technical logs, which may contain your IP address. Purpose: prevent abuse and diagnose outages. Legal basis: legitimate interest.
Analytics, only if you accept it: pages viewed, clicks, actions taken (creating a search, clicking a listing...), visit duration, device and browser type, approximate country and city, and session recordings. When you are signed in, this data is linked to your account (identifier and email). Form fields and displayed personal data are masked in recordings, and the IP address is not stored. Purpose: understand how the site is used in order to improve it. Legal basis: your consent, which you can withdraw at any time.
PokeSnoop does not sell your data, shows no advertising and makes no automated decisions producing legal effects concerning you.
3. Recipients and Processors
Your data is intended for the publisher of PokeSnoop. It is processed on its behalf by:
• Contabo GmbH (Germany): hosting of the site and database, within the European Union.
• PostHog Inc.: analytics, only with your consent. Data is hosted in the European Union (Frankfurt, Germany). As PostHog is a US company, access from the United States remains possible; it is governed by the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework.
• Google LLC: only if you choose to sign in with Google (authentication).
• Discord Inc.: only if you configure a Discord webhook, to send you alerts.
Google and Discord are established in the United States; transfers are governed by the EU–US Data Privacy Framework.
4. Retention Periods
Account and service usage data: for as long as your account exists. It is deleted when you delete your account (possible at any time from the settings page).
Technical logs: 12 months maximum.
Analytics: events kept for 12 months maximum, session recordings for 30 days maximum.
Cookie choice: 6 months, after which you are asked again.
5. Cookies and Trackers
The site stores the following trackers on your device (cookies or browser local storage). Strictly necessary trackers are exempt from consent; analytics is only enabled after you agree.
List of trackers
| Name | Purpose | Duration | Consent |
|---|---|---|---|
| pokarbitrage_token, pokarbitrage_email, pokarbitrage_role | Keep you signed in | 7 days (session token) | Not required (necessary) |
| pokarbitrage_oauth_state | Secure Google sign-in | 10 minutes | Not required (necessary) |
| pokesnoop-theme | Remember light or dark theme | Until deleted | Not required (necessary) |
| pokesnoop-consent | Remember your cookie choice | 6 months | Not required (necessary) |
| ph_<key>_posthog | PostHog analytics: visitor and session identifier | 12 months | Required |
| __ph_opt_in_out_<key> | Remember whether you accepted or refused analytics | Until deleted | Not required (necessary) |
6. Your Rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, port and object to the processing of your data, the right to withdraw your consent at any time, and the right to set guidelines on what happens to your data after your death.
To exercise them, write to contact@pokesnoop.com from your account email address. We reply within one month. You can delete your account and all its data yourself from the Settings page.
If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.
7. Minors
If you are under 15, consent to analytics must be given jointly with one of your parents or legal guardians.
8. Changes
This policy may change. If a new purpose or a new analytics provider is added, you will be asked for your consent again.