PrimeDex
포켓몬 도감 로딩 중
가자, 포켓몬!
PrimeDex
가자, 포켓몬!
June 4, 2026 · June 4, 2026
This policy describes how we process your personal data when you use PrimeDex, in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
PrimeDex is a non-commercial, fan-made website not affiliated with Nintendo, Game Freak, The Pokémon Company, or Creatures Inc. We take the protection of your privacy very seriously. This policy explains, in full transparency, what data is collected, why, how it is used, how long it is kept, and what your rights are.
The data controller for your personal data is:
PrimeDex is published by an individual on a personal, non-commercial basis. There is no legal entity, no company registration number, and no separate legal representative.
The publisher acts as the data controller within the meaning of Article 4(7) of the GDPR. They determine the purposes and means of processing your personal data.
| Role | Identity | Contact |
|---|---|---|
| Publisher (Data Controller) | Individual — PrimeDex | estdel3012@gmail.com |
| Host (Processor) | Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA | privacy@vercel.com |
| Data Protection Officer | Not designated (low-risk processing) | estdel3012@gmail.com |
No data is transferred to a third country outside the European Union without adequate safeguards (Standard Contractual Clauses or adequacy decision).
PrimeDex collects only the minimum data necessary to operate the service.
We do not collect any direct identification data (name, surname, email address, phone number, postal address, date of birth) when you use the site. No registration or account creation is required.
The following data is stored exclusively in your browser's local database (IndexedDB). It is never transmitted to our servers or to any third party, and we have no access to it:
This data stays on your device. You can delete it at any time via the site settings ("Reset my data" section) or by clearing your browser storage data.
Upon any connection to PrimeDex, your browser automatically exchanges technical information with our infrastructure and our processors. This data is strictly necessary for the establishment and proper operation of the communication:
| Category | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Technical | IP address | Network routing, security, anti-abuse, CDN geolocation | Legitimate interest (Art. 6.1.f) |
| Technical | User-Agent (browser, OS) | Display compatibility, debugging | Legitimate interest (Art. 6.1.f) |
| Technical | HTTP headers (Referer, Accept-Language) | Routing, language detection | Legitimate interest (Art. 6.1.f) |
| Logs | Vercel access logs (timestamp, URL, HTTP code) | Security, incident detection, debugging | Legitimate interest (Art. 6.1.f) |
In accordance with Article 6 of the GDPR, each data processing activity relies on a specific legal basis:
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Provision of Pokédex and TCG service | Technical data (IP, UA) | Service provision / Legitimate interest (Art. 6.1.f) |
| Memorization of language and preferences | Functional cookies | Legitimate interest (Art. 6.1.f) — CNIL consent exemption |
| Hosting and content delivery | All technical data | Hosting contract (Art. 6.1.b) with Vercel |
| Security, anti-abuse, debugging | Vercel logs, IP | Legitimate interest (Art. 6.1.f) |
| Responding to your contact requests | Email, message content | Pre-contractual measures or consent (Art. 6.1.a/b) |
| Local storage of your preferences | IndexedDB data | Outside GDPR — local storage on your device |
Your data is only shared with the processors strictly necessary to operate the service. No commercial transfer is made.
PrimeDex does not sell, rent, or transfer any personal data to third parties for commercial or marketing purposes. No profiling or automated decision-making producing legal effects is performed.
| Processor | Service | Country | Transfer safeguards |
|---|---|---|---|
| Vercel Inc. | CDN hosting, SSR, logs | USA | EU-US Data Privacy Framework + SCCs |
| PokéAPI (Paul Hallett) | Public Pokémon data API | USA/EU | No personal data transmitted |
| TCGdex | Public TCG cards API | EU/France | No personal data transmitted |
| Scrydex | TCG image hosting | EU | No personal data transmitted |
| GitHub (raw.githubusercontent.com) | Sprites hosting | USA | No personal data transmitted |
The site is hosted by Vercel Inc., a company based in the United States. Data transfers to the United States are governed by the European Commission adequacy decision on the EU-US Data Privacy Framework (DPF) of July 10, 2023, and, subsidiarily, by the Standard Contractual Clauses (SCCs) adopted by the European Commission.
The other third-party services (PokéAPI, TCGdex, Scrydex, GitHub) do not receive any personal data about you: only the technical data necessary to route requests is transmitted to them.
To exercise your rights or obtain a copy of the transfer safeguards, you can contact us at estdel3012@gmail.com.
We apply the principle of data minimization for retention periods:
| Data category | Retention period |
|---|---|
| Local IndexedDB data | Until you delete it (via settings or browser) |
| Functional cookies | Maximum 1 year |
| Vercel logs | Maximum 30 days (Vercel internal rotation policy) |
| Contact emails | 3 years after the last exchange (accounting obligation) |
PrimeDex implements appropriate technical and organizational measures to protect your data against unauthorized access, modification, disclosure, or destruction.
Under the GDPR (Articles 15 to 22) and the CCPA, you have the following rights regarding your personal data:
To exercise any of these rights, write to us at estdel3012@gmail.com. We will respond within a maximum of 30 days. Proof of identity may be required to verify that the request comes from you.
You may also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, www.cnil.fr) or, for EU residents, with your national data protection authority. For California residents, you may contact the California Attorney General (oag.ca.gov).
PrimeDex is aimed at a family audience and may be consulted by minors. The site does not knowingly collect any personal data from children under 16 (or the applicable age under local law) without parental consent.
The site does not offer any section reserved for children, does not offer messaging, and does not collect information that would directly identify a minor. Parents who believe their child has provided personal information may contact us to request its deletion.
In compliance with the COPPA (Children's Online Privacy Protection Act) and the GDPR, no data is knowingly collected from children under 13 (COPPA) or 16 (GDPR, unless a lower age is set by the Member State).
PrimeDex relies on third-party APIs and services to provide the displayed data (PokéAPI, TCGdex, Scrydex, GitHub). These services have their own privacy policies, which we encourage you to consult.
The site may also offer links to external sites (e.g., the official Pokémon page, YouTube videos, shops). We are not responsible for the content or privacy practices of these third-party sites.
This privacy policy may be updated to reflect changes in the service, regulation, or our practices. The date of the last update is indicated at the top of this page.
In case of a material change, a notification will be displayed in a visible manner on the site (e.g., via a temporary banner). We encourage you to consult this page regularly.
For any question regarding this privacy policy or the exercise of your rights:
| Channel | Detail |
|---|---|
| estdel3012@gmail.com | |
| Response time | Maximum 30 days (Art. 12.3 GDPR) |
| Languages | French or English |
| Source code | github.com/Teeflo/Poke (public issues) |
This legal document is primarily drafted in French and English. The French version prevails in case of discrepancy, subject to the mandatory provisions of your country of residence.