Privacy Policy

Learn about what data we collect and how we use it

Last updated: July 24, 2026

TL;DR:

You can browse Cobbledex anonymously. If you choose to sign in with Google or Discord, we store your account profile (name, email, avatar) so you can save teams and manage servers. We use cookies for analytics and advertising, which you control through the consent banner. You can ask us to access or delete your data at any time.

Your privacy matters to us. This Privacy Policy explains what personal data we collect, why we collect it, the legal basis for processing it, who we share it with, and the rights you have under the EU/UK General Data Protection Regulation (GDPR) and similar laws.

Who We Are

Cobbledex ("Cobbledex", "we", "us") is an independent, fan-made website available at www.cobbledex.info. For the purposes of data protection law, Cobbledex is the data controller for the personal data described below. You can reach us using the contact details at the end of this policy.

What We Collect

You can use most of Cobbledex without giving us any personal information. We collect personal data only in the situations below.

Account data (only if you sign in)

Cobbledex lets you sign in with Google or Discord. If you choose to sign in, the provider shares a profile with us and we store:

  • Your account ID at the provider (Google ID or Discord ID)
  • Your email address and whether it is verified
  • Your name and/or username (and, from Google, your given and family name)
  • Your profile picture and locale/language preference

We do not receive or store your Google or Discord password, and we never post or take actions on your behalf. We only request basic profile and email access (the openid email profile scope for Google).

Session & security data

When you are signed in, we create a session and store your IP address and browser user-agent alongside a session identifier. This helps us keep your account secure and prevent abuse.

Content you create

If you build and share Pokémon teams, or upvote community teams, we store that content. Upvotes are de-duplicated using a hashed version of your IP address so that the same person can't vote repeatedly.

CobbleGPT questions

If you use our CobbleGPT assistant, we log the question you ask, the answer generated, and technical metadata (IP address, browser, and referring page) to operate, debug, and improve the feature. Please do not enter sensitive personal information into CobbleGPT.

Analytics & advertising data

Subject to your consent (see Cookies & Consent below), we and our partners use cookies and similar technologies to measure how the site is used and to show advertising. This may include anonymised or pseudonymised identifiers, pages viewed, approximate location, and device information.

Why We Use Your Data & Legal Basis

  • To provide accounts and features you request (sign-in, saving teams, managing servers/events) — legal basis: performance of a contract / taking steps at your request.
  • To keep the site secure and prevent abuse (sessions, IP logging, upvote de-duplication) — legal basis: legitimate interests.
  • For analytics and advertising — legal basis: your consent, which you can withdraw at any time.
  • To operate and improve CobbleGPT — legal basis: legitimate interests in running and improving the service.

Cookies & Consent

We use cookies and similar technologies for:

  • Strictly necessary purposes, such as keeping you signed in and remembering your consent choices. These are always active because the site cannot work without them.
  • Analytics (Google Analytics), to understand how visitors use the site.
  • Advertising, served through Publift Fuse and its ad partners.

Analytics and advertising cookies are only set after you consent through our consent banner. Until then, these technologies are held in a "denied" state. You can change or withdraw your consent at any time via the privacy/consent options in the banner, and you can also block or delete cookies through your browser settings.

Our consent banner is provided through an IAB Transparency & Consent Framework (TCF) consent management platform, and Google Analytics is configured to respect your choices using Google Consent Mode.

Third-Party Services & Processors

We rely on the following third parties to run Cobbledex. They process personal data on our behalf or as independent controllers under their own privacy policies:

  • Google — sign-in (OAuth), Google Analytics, and advertising (Google Ad Manager / DoubleClick)
  • Discord — sign-in (OAuth) and community/feedback notifications
  • Publift Fuse and its ad partners (including Google, Amazon Publisher Services, and an InMobi consent management platform) — advertising
  • Vercel — website hosting and delivery
  • OpenAI and Pinecone — powering the CobbleGPT assistant (your question is sent to these services to generate an answer)
  • FontAwesome — iconography

These services process data according to their own privacy policies. We do not sell your personal data.

International Data Transfers

Some of our providers (including Google, Discord, Vercel, OpenAI, and Pinecone) are based in the United States or process data outside the European Economic Area (EEA) and the UK. Where your data is transferred internationally, it is protected by appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses, as offered by those providers.

Data Retention

  • Account data is kept for as long as your account exists. If you ask us to delete your account, we remove it (see Your Rights).
  • Sessions expire and are cleared within 30 days, or sooner if you sign out.
  • CobbleGPT logs and security logs are retained only as long as needed to operate, secure, and improve the service.
  • Analytics data is retained according to Google's configured retention settings.

Your Rights

If you are in the EEA, the UK, or another region with similar laws, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data ("right to be forgotten") and close your account
  • Restrict or object to certain processing
  • Receive a copy of your data in a portable format
  • Withdraw consent for analytics/advertising at any time
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by law (generally within one month).

Children's Privacy

Cobbledex is a general-audience site and is not directed at young children. Depending on your country, you must be at least 13 to 16 years old to create an account or consent to analytics and advertising. If you believe a child has provided us personal data without appropriate consent, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

Contact

If you have any questions about this policy or wish to exercise your data rights, please contact us on Discord.