poconnections

Playing without an account

When you first open the site we set a single cookie (pc_sess) holding a randomly generated, signed identifier. It contains no personal information. Its purpose is to remember the puzzle you have in progress and the XP you have earned. It expires after 90 days.

Against that identifier we store your gameplay for each day: which groups you solved, how many attempts you took, whether you finished, and the experience points awarded. Nothing else.

If you sign in

You may connect a Google or Discord account. We ask those services only for a stable account identifier, your display name, and your avatar image URL. From Google we also receive your email address; from Discord we do not request it.

We store: the provider account identifier, your display name, your avatar URL, and — for Google — your email address. We use the email address solely to recognise your account if you later need help recovering it. We never email you, and we never sell or share any of it.

We never receive your password. We do not request access to your contacts, files, servers, or anything else.

When you sign in from a device where you had been playing anonymously, that anonymous progress is merged into your account and the anonymous record is deleted.

What is public

Signing in makes your display name, avatar, level, streak, and medals visible on the leaderboards and on your trainer page at /u/…. Your email address, your account identifiers, and your individual puzzle records are never shown to anyone else. Trainer pages are excluded from search engine indexing.

Analytics

We may use privacy-respecting aggregate analytics to count page views and understand which puzzles are too hard. Analytics identifiers are separate from gameplay records and are never used to build a profile of you.

Deleting your data

You can delete your account from the trainer card at any time. Deletion is immediate and permanent: your profile, linked logins, gameplay history, experience points, and medals are all erased, and we keep no backup copy of them. There is no recovery afterwards.

If you never signed in, clearing cookies for this site permanently detaches you from your stored progress; a fresh identifier is issued on your next visit. Because that record holds no personal data, we cannot look it up or return it once its cookie is gone.

Third parties

Pokémon sprites and species data come from PokeAPI. The site is hosted on Cloudflare, whose edge network processes requests and stores our database. Google and Discord process your sign-in if you choose to use them, under their own privacy policies. We do not sell or share your data with anyone else.

Children

The site is suitable for general audiences. Playing requires no personal information at all. If you are under the age at which your country permits you to consent to data processing, please do not sign in — play anonymously instead.