Privacy Policy

Last updated: June 9, 2026

IllustrationDex is a fan-made Pokémon TCG art discovery tool. This policy explains what data is collected and how it is used. You can use IllustrationDex completely anonymously, or create an optional account to sync your binders across devices.

Using IllustrationDex without an account

If you don't create an account, your binders and preferences are stored only in your browser's localStorage. We don't save them to our servers. The searches you run are sent to our search backend so it can return matching cards, and card images and details load from our content network as you browse. Apart from that and the anonymous, cookieless analytics described below, nothing else leaves your device.

Accounts (optional)

If you create an account, we store the following on our server (a PostgreSQL database hosted on PlanetScale):

• Your email address, display name, and username
• Whether your email has been verified, and a hashed password
• Login sessions, which include your IP address and browser user-agent (used to keep you signed in and to protect your account against abuse)
• The binders you create while signed in (so they sync across your devices)

Email verification. Creating an account requires verifying your email. We send a one-time verification link to your address using Cloudflare's email service, from noreply@illustrationdex.com. The link expires after one hour.

Anonymised statistics

We collect binder data to provide the service (syncing your binders across your devices). We may also derive anonymised, aggregated statistics from binder and usage data, such as how often particular cards or sets appear in binders. These statistics do not identify you, and may be used for research and published or licensed commercially.

Cookieless analytics

We record anonymous usage events, sent directly to our own infrastructure, such as:

• Pages and binders visited
• Search queries (length only, not the query text) and result counts
• Filter interactions and sort changes
• Card modal opens and binder actions (add, move, remove, export)

Analytics run in a fully cookieless mode: no cookie is set, and we never send your name, email, or account ID. A random session identifier is generated in your browser's session storage to group events from one visit; it is cleared when the tab closes and is never linked to your account. Events are sent to a first-party endpoint on this site and stored in our own Cloudflare R2 storage — no third-party analytics processor is involved.

Third-party services

• Cloudflare: hosting, content delivery, image storage and analytics storage (R2), and the email service used for verification emails
• PlanetScale: the PostgreSQL database that stores account and binder data
• Fly.io: backend hosting; receives no account or personal data

Data retention

• Account data (your email, name, username, and hashed password) and the binders you store while signed in are kept for as long as your account exists. When your account is deleted, this data, along with your sessions and login records, is deleted.
• Login sessions expire automatically and are deleted when they expire or when you sign out.
• Email verification links expire one hour after they are sent.
• Anonymous analytics contain no personal data; the browser-side session id used to group events is cleared automatically when you close the tab.
• Data stored in your browser (binders when signed out, and your preferences) remains until you clear your site data, and you can remove it at any time.

Children

IllustrationDex is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

Your choices

There is no analytics identifier stored on your device to clear. To send no analytics at all, use a browser or extension that blocks analytics requests.

To access or delete your account and the data associated with it, email us at the address below. Deleting your account also removes your stored binders, sessions, and login records.

See our Cookie Policy for a full breakdown of cookies and browser storage used by IllustrationDex.

Changes to this policy

We may update this Privacy Policy at any time. Changes take effect when posted, and the "Last updated" date above will reflect them. Continued use of IllustrationDex after changes are posted constitutes acceptance of the updated policy.

Contact

For privacy questions, contact: contact@illustrationdex.com