PokéTT← Back to site

Cookie Policy

Last updated: October 14, 2026

Cookies (and similar browser storage such as localStorage) are small pieces of data a site keeps in your browser. We use as few as we reasonably can. We do not use advertising cookies or cross-site tracking. Here is exactly what we use and why.

Strictly necessary

These are required for the site to work — in particular to keep you signed in and to protect the service. They cannot be switched off.

  • Authentication (set by Clerk) — keep you logged in and secure your session.
  • Security (set by Cloudflare) — detect and block abusive or automated traffic.
  • Bot detection (not a cookie) — a one-time, in-memory check of your browser’s graphics renderer, used to flag automated/headless traffic. Nothing is stored in your browser; a positive signal is sent to us once. This is a security measure under our legitimate interest in keeping the catalog data available and not scraped en masse — it is not gated by the consent choice below (an automated scraper would simply decline).

Preferences

These remember choices you make so the site behaves the way you like.

  • Theme & display — your light/dark theme, language, density and panel layouts, stored in your browser’s localStorage (pokett.settings, pokett.lang, layout keys).
  • Consent choice — whether you accepted or declined session replay below (pokett.consent.replay), so we don’t ask again every visit.
  • Pack simulator — your opened packs and daily pull (pokett.pack.*, pokett.dailypull), stored in your browser.
  • Mobile app cache (m.pokett.app) — a copy of public market data (pokett-rq) so the app opens fast; it never contains your portfolio, alerts or profile, and is cleared when you sign out.

Analytics & performance

These help us understand how the site performs, how many people visit and what they’re looking for, so we can make it faster and better. None of them set a tracking cookie or build a cross-site profile of you.

  • Vercel Speed Insights — privacy-friendly page performance measurement (Core Web Vitals). Always on; no cross-site tracking.
  • Sentry error reporting — technical crash/error reports (may include your IP, browser and the page involved) so we can fix bugs. Always on; needed to keep the service working.
  • Sentry Session Replay — an anonymized recording of your on-screen actions (never camera/microphone, and no card-scanner photos), used only to reproduce bugs. Off by default — only runs if you accept it in the banner shown on your first visit; you can change your mind by clearing your browser storage for this site.
  • Cloudflare Web Analytics — cookieless page-view counts (page, referrer, country, device type). No cookie is set and no persistent visitor ID is created. We do not record what you click or do on the site.
  • PostHog (EU) — product-usage events such as “a search was run” or “a tool was opened”. No cookie and no local storage: it is kept in memory only and gone when you close or reload the page. No IP address is stored, no session videos, no clicks or typing recorded. Not loaded at all if your browser sends Do Not Track or Global Privacy Control.

How to control cookies

You can clear or block cookies in your browser settings at any time. Note that blocking strictly necessary cookies will break sign-in and parts of the service. For preferences and analytics, clearing your browser storage removes them.

Heads up
If you disable strictly-necessary cookies you may not be able to log in or use account features.

Third parties

The cookies above are set by us and by our providers — Clerk (authentication) and Cloudflare (security). PostHog, Cloudflare Web Analytics and Vercel Speed Insights set no cookies; Sentry stores replay data only if you accept it. See our Privacy Policy for how each provider handles data.

Changes & contact

We will update this page if our cookie use changes; the date at the top reflects the latest version. Questions: privacy@pokett.app.