In short: the site has no accounts, no cookies, no analytics and no ads, and we never ask you for personal information. Like any website, it can’t work without your browser’s connection details, which our hosting provider and a few image sources receive.
Who is responsible
The Project Rebirth team, operating from Italy, runs this site and is the data controller under the EU General Data Protection Regulation (GDPR). You can reach us on our Discord server.
What information is used
- Connection data when you visit. Your browser sends technical details with every request: your IP address, browser and device type, the page requested and the time. The site is hosted by Cloudflare, which processes this data to deliver pages, protect the site from attacks and keep logs, as described in Cloudflare’s Privacy Policy.
- Images loaded from other websites. The Pokédex loads Pokémon sprites from Pokémon Showdown (play.pokemonshowdown.com), and the Locations page loads screenshots from Fandom (static.wikia.nocookie.net). Your browser connects to these services directly, so they receive your IP address and browser details under their own privacy policies. We tell browsers to share only our site’s address with them, not the page you are on.
- Admin sign-in protection. Only the team uses the admin area. To stop password guessing, sign-in attempts are counted in one-minute windows against a one-way scrambled (hashed) form of the IP address they came from. Those entries are cleared when a new window starts, which happens the next time the admin area is used.
- Messages you send us. If you contact us on Discord, we see your Discord username and what you write, and Discord processes it under Discord’s Privacy Policy.
We don’t use cookies, analytics, advertising or tracking tools, the site stores nothing in your browser, and we don’t sell or share personal information.
Why we use it
We use this information to show you the site, keep it secure and working, and answer messages you send us. The legal basis is our legitimate interest in running a safe, working website and replying to people who contact us (GDPR Article 6(1)(f)).
How long it is kept
Sign-in protection entries are cleared once their one-minute window has passed and the admin area is next used; nothing else about visitors is stored by the site. Connection logs are kept by Cloudflare for the periods set out in its own policy. We keep Discord conversations only as long as needed to deal with your message. We don’t build profiles of visitors.
Where it is processed
Cloudflare, Discord and the image sources above may process data outside the European Union, including in the United States. Where they do, they rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
Your rights
Under the GDPR you can ask to see, correct or delete personal information we hold about you, object to or restrict its use, or receive a copy of it. Contact us on Discord; we may need to confirm it’s you, and we will reply within one month. Because the site doesn’t identify visitors, we often won’t hold anything that can be linked to you. You can also complain to Italy’s data protection authority, the Garante per la protezione dei dati personali, or the authority where you live.
Children
Many players are young. The site doesn’t ask anyone for personal information and has no accounts or sign-ups, so children can browse it without sharing anything about themselves. Discord has its own minimum age; if you are younger, ask a parent or guardian to contact us for you.
Changes to this policy
If the site changes, for example by adding accounts or analytics, we will update this policy before the change goes live. The date at the top shows the latest version.