1. Who is responsible
PokePrice EU is an invitation-only private pilot operated by the project owner. Full controller details will be published before any paid public launch.
Until the controller record is completed, privacy questions and requests can be sent to pilot@kihakookt.com.
2. Data we handle
- Account and license data: email address, display name, account status, license and device activation details, and download or support history.
- Collection and preference data: collection items, quantities, acquisition cost, notes, master-set progress, tracking interests, watchlists, alert settings, notification state, and encrypted read-only collection snapshots that you explicitly choose to share.
- Technical and security data: IP address, device and app version, browser or request details, sign-in and security events, and limited operational logs.
- Optional usage data: after opt-in in the packaged app, basic app, device, and session events used to understand reliability and usage.
- Support data: messages you send, troubleshooting context, and the response history needed to handle the request.
The current launch site has no advertising tracker and does not set a marketing or analytics cookie. Necessary browser session storage supports signed-in account access for the tab session and is removed when you sign out. A separate device-local notice acknowledgement stores only the notice version and two timestamps. It is valid for 180 days and is cleared on a later visit after expiry, or when you clear browser data. It contains no user ID and is not sent over the network. The private pilot has no integrated public checkout and does not currently collect card-payment data.
Continuing with necessary storage only acknowledges that you saw this website notice. It is not permission for optional analytics or advertising, and it does not change the separate opt-in for optional usage data in the packaged app. Limited operational and security logs still exist independently of this browser control. Emailing support sends the information you choose to include, but does not enable website analytics. You can reopen these details through Cookie settings at the bottom of every page.
3. Why we use it
| Purpose | Working legal basis |
|---|---|
| Provide accounts, licenses, sync, collections, alerts, and support | Contract or steps requested before entering a contract |
| Secure the service, prevent abuse, diagnose faults, and recover data | Legitimate interests, subject to a documented balancing assessment |
| Send optional, privacy-minimized usage analytics | Consent, which can be withdrawn in the app |
| Meet accounting, consumer, or regulatory duties if they arise | Legal obligation |
These bases are the current operational assessment and still require final controller and legal approval before commercial launch.
4. Where data comes from
Most personal data comes directly from you when you create an account, use the app, save collection information, configure an alert, request a download, or contact support. Security metadata is generated when your device communicates with the site or API. Market prices and product records come from market and catalog sources; they are not used to enrich a profile about you.
5. Service providers and other recipients
We use service providers for website and application hosting, database and file storage, content delivery, backups, email delivery, security, and operational support. Each provider receives only the personal data needed for its role and processes it under the applicable agreement.
If you connect an external messaging or webhook service for alerts, the selected alert content is sent to that service at your direction. No payment processor is connected to the current pilot. Personal data is not sold.
Provider records, processing agreements, locations, and any international-transfer safeguards are documented as part of the service’s data-protection review. Where data is processed outside the EEA, the applicable transfer basis and safeguards must be confirmed before commercial launch.
6. Retention
Account, license, collection, alert, and usage records are kept while the pilot account is active and then handled through a verified deletion request, subject to security, legal, and backup requirements. Final post-closure periods must be approved before commercial launch.
- Temporary sign-in and device-security records expire after short operational periods.
- Optional usage events awaiting delivery are kept for no longer than six days.
- Collection share links expire after 30 days and can be replaced or revoked sooner.
- Operational logs, backups, and audit records follow limited retention schedules.
7. Security
The service uses technical and organisational safeguards designed to protect personal data, including access controls and protections for authentication data and stored credentials. No internet service is risk-free; suspected incidents are assessed and handled through the documented incident process.
8. Your rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction, or portability, and you can object to processing. You can also withdraw consent at any time without affecting processing that was lawful before withdrawal.
To make a request, email pilot@kihakookt.com, preferably from the address linked to your account. We may ask for enough information to verify that the request concerns you. We will respond without undue delay and normally within one month.
These rights can be limited where the law permits. If an exception applies, the response will explain it. You also have the right to complain to a data protection authority, particularly in the EU or EEA country where you live, work, or believe an infringement occurred.
9. Forecasts and automated decisions
Product forecasts and portfolio calculations are informational estimates. The service does not make a solely automated decision about you that produces legal or similarly significant effects.
10. Children
The pilot is intended for adults. A person under 18 should not create an account or submit personal data without a parent or guardian’s involvement and any consent required by local law.
11. Changes and contact
Material changes will be dated here and, where appropriate, communicated through the account or app. Questions can be sent to pilot@kihakookt.com.
Official reference: the European Commission’s GDPR information for individuals.