Politique de confidentialité

Last updated: September 3, 2026

Your privacy matters to us. This Privacy Policy explains what personal data we collect, why we collect it, the legal basis for processing it, who we share it with, and the rights you have under the EU/UK General Data Protection Regulation (GDPR) and similar laws.

Who We Are

Cobbledex ("Cobbledex", "we", "us") is an independent, fan-made website available at www.cobbledex.info. For the purposes of data protection law, Cobbledex is the data controller for the personal data described below. You can reach us using the contact details at the end of this policy.

What We Collect

You can use most of Cobbledex without giving us any personal information. We collect personal data only in the situations below.

Account data (only if you sign in)

Cobbledex lets you sign in with Google or Discord. If you choose to sign in, the provider shares a profile with us and we store:

• Your account ID at the provider (Google ID or Discord ID)
• Your email address and whether it is verified
• Your name and/or username (and, from Google, your given and family name)
• Your profile picture and locale/language preference

We do not receive or store your Google or Discord password, and we never post or take actions on your behalf. We only request basic profile and email access (the openid email profile scope for Google).

Session & security data

When you are signed in, we create a session and store your IP address and browser user-agent alongside a session identifier. This helps us keep your account secure and prevent abuse.

Content you create

If you build and share Pokémon teams, or upvote community teams, we store that content. Upvotes are de-duplicated using a hashed version of your IP address so that the same person can't vote repeatedly.

CobbleGPT questions

If you use our CobbleGPT assistant, we log the question you ask, the answer generated, and technical metadata (IP address, browser, and referring page) to operate, debug, and improve the feature. Please do not enter sensitive personal information into CobbleGPT.

Analytics & advertising data

We use only our self-hosted Umami instance for site analytics. It records page views, referrers, browser and device information, approximate location, and interactions such as clicks or saves. Umami uses the request IP address to derive approximate location and a rotating session identifier, but does not store the raw IP address. It does not use cookies or cross-site identifiers. It is enabled by default and can be switched off at any time using the footer control. Our advertising partners process data separately, subject to your choices in the consent banner.

Why We Use Your Data & Legal Basis

• To provide accounts and features you request (sign-in, saving teams, managing servers/events) — legal basis: performance of a contract / taking steps at your request.
• To keep the site secure and prevent abuse (sessions, IP logging, upvote de-duplication) — legal basis: legitimate interests.
• To understand and improve site usage through privacy-preserving Umami analytics — legal basis: our legitimate interests in operating and improving the site. You can object at any time using the footer control.
• For advertising — legal basis: your consent, which you can withdraw at any time.
• To operate and improve CobbleGPT — legal basis: legitimate interests in running and improving the service.

Cookies, Analytics & Consent

We use cookies and similar technologies for:

• Strictly necessary purposes, such as keeping you signed in and remembering your consent choices. These are always active because the site cannot work without them.
• Analytics through our self-hosted cookieless Umami instance, to understand how visitors use the site. Umami is enabled by default, sets no cookies, and is not controlled by the advertising consent banner.
• Advertising, served through Publift Fuse and its ad partners.

Analytics is active by default and does not depend on the banner. You can switch it off at any time with the "Do not track me" control in the footer of every page. That preference is stored in your browser and immediately stops future Umami pageviews and events. Use the same control ("Enable analytics") to turn analytics back on. Opting out does not remove analytics events recorded before you opted out; those remain subject to the retention policy below.

Advertising is subject to your consent through our consent banner and is unrelated to the analytics opt-out above.

Our consent banner is provided through an IAB Transparency & Consent Framework (TCF) consent management platform.

Services & Processors

We use the following services and software to run Cobbledex. Where an external provider receives personal data, it processes that data on our behalf or as an independent controller under its own privacy policy:

• Google — sign-in (OAuth) and advertising (Google Ad Manager / DoubleClick)
• Umami (self-hosted) — open-source, cookieless analytics running on infrastructure we control. It uses IP addresses transiently to derive approximate location and rotating sessions, but does not store the raw IP address or create cross-site identifiers. It is enabled by default and can be disabled at any time via the footer control; see the Umami documentation.
• Discord — sign-in (OAuth) and community/feedback notifications
• Publift Fuse and its ad partners (including Google, Amazon Publisher Services, and an InMobi consent management platform) — advertising
• Vercel — website hosting and delivery
• OpenAI and Pinecone — powering the CobbleGPT assistant (your question is sent to these services to generate an answer)
• FontAwesome — iconography

These services process data according to their own privacy policies. We do not sell your personal data.

International Data Transfers

Some of our providers (including Google, Discord, Vercel, OpenAI, and Pinecone) are based in the United States or process data outside the European Economic Area (EEA) and the UK. Where your data is transferred internationally, it is protected by appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses, as offered by those providers.

Data Retention

• Account data is kept for as long as your account exists. If you ask us to delete your account, we remove it (see Your Rights).
• Sessions expire and are cleared within 30 days, or sooner if you sign out.
• CobbleGPT logs and security logs are retained only as long as needed to operate, secure, and improve the service.
• Analytics data is stored in our self-hosted Umami database for as long as needed for aggregate reporting and is then deleted.

Your Rights

If you are in the EEA, the UK, or another region with similar laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data ("right to be forgotten") and close your account
• Restrict or object to certain processing
• Receive a copy of your data in a portable format
• Object to analytics processing and withdraw advertising consent at any time
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by law (generally within one month).

Children's Privacy

Cobbledex is a general-audience site and is not directed at young children. Depending on your country, you must be at least 13 to 16 years old to create an account or consent to advertising. If you believe a child has provided us personal data without appropriate consent, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

Contact

If you have any questions about this policy or wish to exercise your data rights, please contact us on Discord.