1. Controller
The controller is Alejandro Rodríguez Beltrán, operating as Neotecos Software. Address for correspondence: P.O. Box 1032, 19005 Guadalajara (Spain). Contact: dev@neotecos.com.
2. Information processed
NuzPoke does not require registration or a real identity. The service may process:
- Run data: run name, trainer name, nicknames, team composition and layout preferences. They are stored only in the run itself.
- Access identifiers: random admin and view tokens required to recover and display each run.
- Activity log: actions taken in the tool (creating a run, team and layout changes, copied links, Pokémon search queries and filters), with their date and time, the run view token, the source page without parameters and a simplified browser (family, major version and operating system). It does not include your IP address, the admin token, run or trainer names, or nickname text; for nicknames it only records whether a Pokémon has one.
- Analytics identifier: if you accept analytics, a random identifier from your browser accompanies the activity log to tell repeat visits apart. Without consent its value is “anonymous”, shared by every user. Details are in the cookie policy.
- Technical and security data: the IP address and headers of each request are used to serve it and protect the service. The IP is not stored in the database; to rate-limit run creation it is kept only as a hash for up to 24 hours. For security, the web server logs record the IP address, date and time, requested page without parameters and browser of each request.
- Communications: if you email dev@neotecos.com, your email address and the content of your message.
- Analytics data: visited pages, device (including brand, model, operating system and browser), approximate location down to city level (Google derives it from the IP address, which it does not store), traffic source, aggregated interactions and, through Google Signals, aggregated demographics and interests. They are collected with Google Analytics and only with your consent.
Free-text fields (run name, trainer name and nicknames) do not ask for personal data: they are meant for game information. Do not enter personal data that is not requested; inappropriate use of these fields is the responsibility of whoever fills them in. These texts are only stored in the run and shown in the overlay: they are not used for analytics or any automated processing.
NuzPoke does not make automated decisions or build profiles about its users.
3. Purposes and legal basis
- Provide the tool, store the run and synchronize the overlay: performance of the service you request.
- Prevent abuse, malicious automation and unauthorized access: legitimate interest in keeping the service secure.
- Diagnose errors and improve the tool through the activity log: legitimate interest, limited to the minimum data described above.
- Answer enquiries and rights requests: legitimate interest in replying and, for rights requests, compliance with a legal obligation.
- Measure usage with Google Analytics and the first-party analytics identifier: your consent, which you can withdraw at any time.
4. Google Analytics
If you accept analytics, Google Analytics processes browsing data to produce aggregated statistics about site usage. The legal basis is your consent. Analytics does not load before acceptance; if you reject it, your choice stays in your browser and no analytics data or rejection signal is sent to Google. Withdrawing consent blocks further measurement and deletes cookies. It does not delete data collected beforehand or cancel requests already started. Google acts as a provider and may process the data outside the European Union, with the safeguards EU law requires for such transfers.
The cookies it uses, how it works if you reject analytics, the safeguards applied to run links and how to withdraw consent are explained in the cookie policy.
Google Signals. NuzPoke has this Google Analytics feature enabled. If you are signed in to your Google account and have ad personalization turned on, Google associates your visit data with your account. This gives NuzPoke reports on cross-device usage and on demographics (age and gender) and interests. NuzPoke only sees this data in aggregate, never for a specific person, and does not use it for advertising.
You can avoid this by rejecting analytics, turning off ad personalization in Google My Ad Center or installing the Google Analytics opt-out browser add-on.
5. Retention and recipients
- Runs with at least one Pokémon: kept while the service is in use or until you request deletion.
- Runs you delete: the “Delete” button in “My games” marks them, and they are permanently deleted, together with their team and the rest of their data, after 30 days; until then you can undo it with “Restore”. Their activity log is not removed at that moment but when it reaches 14 months.
- Runs without any Pokémon: deleted automatically, together with their activity log, after 30 days without changes.
- Activity log: each entry is deleted automatically after 14 months.
- Backups: made daily and kept for 7 days, so deleted data also disappears from them within that period.
- Emails: emails and attachments are stored on the NuzPoke server, hosted in the EU by OVHcloud, for a maximum of 14 months from the date of each message.
- IP rate limits: the IP hash is discarded within 24 hours.
- Web server logs: kept for 30 days and then overwritten. If a rights request or claim requires preservation of evidence, an extract of the necessary records is saved before deletion in a private case file, under the safeguards and exceptions stated below.
- Google Analytics: event data is kept for 14 months. The lifetime of each cookie is listed in the cookie policy.
Ordinary retention periods may be suspended for specific data that must be preserved due to a restriction of processing, legal obligation or claim. Access is restricted and the data is kept only for that purpose and for as long as justified. Internal logs for affected runs are excluded from diagnosis and analysis where applicable, and their automatic deletion is suspended. The internal flag alone does not suspend the run’s operation or publication; the scope is determined when handling the request.
Information may be processed by hosting, email and measurement providers to the extent necessary to operate the service. Personal data is not sold to third parties.
6. Rights
You may request access, correction, deletion, restriction, objection or portability where applicable by emailing dev@neotecos.com. To delete your runs, follow the steps in the next section. You can withdraw analytics consent at any time with the cookie button in the bottom-left corner, as explained in the cookie policy.
If you believe processing violates applicable law, you may lodge a complaint with the competent data protection authority. In the European Union you can do so with the authority of the Member State where you live, work or where the infringement took place.
7. Deleting your runs
You can delete your runs yourself from My games, using the “Delete” button on each one. The run can no longer be managed and its overlay stops showing. It is permanently deleted, together with its team, after 30 days, and until then you can undo it with “Restore”.
You can also request it by email at dev@neotecos.com. In that case you must include the admin link of each run you want deleted, with its identifier. NuzPoke has no accounts or data that identify its users, so without that link there is no way to know which runs are yours or which data you want deleted. Runs requested by email are deleted, together with their activity log, as soon as the request is handled, and disappear from backups within 7 days.
8. Minimum age to consent
To accept analytics you must be at least 14 years old or, if higher, the age your country’s law requires to consent to the processing of your data. If you have not reached it, reject analytics: the tool works the same.