PokeFreeze ("the app", "we", "us") delivers product restock alerts as push notifications and an in-app alert feed. This policy explains what information the app collects, why it is collected, how it is used, who it is shared with, how long it is kept, and the choices and rights you have. We collect the minimum information needed to run the service, and we do not sell personal information to anyone.
PokeFreeze uses Discord for sign-in. When you sign in, Discord asks for your consent and then provides us, through its official API, with:
We never see or store your Discord password, email address, or private messages. Authentication is performed by Discord on Discord's own pages; the app receives only a one-time authorization code, which our server exchanges with Discord directly.
We do not use your information for advertising, profiling, or any form of automated decision-making with legal effect. We do not sell or rent personal information, and we have never done so.
We share information only with the infrastructure providers that run the service ("processors"), each of which processes data on our behalf and under its own security commitments:
| Provider | Purpose | What they process |
|---|---|---|
| Discord Inc. | Sign-in and eligibility verification | Your Discord account interaction happens directly with Discord under Discord's privacy policy |
| Supabase | Database hosting (United States) | Account records, preferences, alert feed data |
| Upstash | Message queue and rate limiting (United States) | Transient delivery jobs and short-lived rate-limit counters |
| Fly.io | Application server hosting (United States) | All server traffic, including transient IP addresses |
| Expo (650 Industries) | Push notification delivery | Push tokens and notification payloads in transit |
| Google (Firebase Cloud Messaging) | Final push delivery to Android devices | Push tokens and notification payloads in transit |
Beyond these processors, we disclose information only if required by law, or to protect the rights, safety, or security of the service and its users. There are no other sharing arrangements, no data brokers, and no advertising partners.
| Data | Retention |
|---|---|
| Alert feed content | Deleted automatically after 7 days |
| Account record, preferences, device push tokens | Kept until you delete your account (see Section 5), then deleted immediately |
| Active sign-in sessions | Expire after at most 365 days of complete inactivity; using the app extends them |
| Superseded session records | Deleted after 30 days (kept briefly for token-theft detection) |
| Rate-limit counters (IP-based) | Expire automatically within minutes |
| Operational logs and metrics | Kept for a limited operational window, then discarded |
| Database backups | Rolling backups age out automatically within a short, fixed window |
In the app (immediate): open Settings → Delete account and confirm. This permanently removes your account record, your channel and sound preferences, your device push tokens, and all sign-in sessions — on the spot. Deletion cannot be undone; you can sign in again afterwards to start fresh.
By email: if you can no longer access the app, email halvenlabs@gmail.com from a message that identifies your Discord user ID, with the subject "Account deletion". We will delete the account and confirm, normally within 7 days.
Alert feed content is not personal data about you (it is shared restock information) and ages out of the system automatically within 7 days regardless.
No system is perfectly secure, but the app is deliberately designed to hold as little about you as possible — the less we store, the less there is to protect.
Depending on where you live (for example, under the GDPR in Europe or the CCPA/CPRA in California), you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. Because we do not sell personal information or use it for cross-context behavioral advertising, there is nothing to opt out of on that front.
To exercise any right, email halvenlabs@gmail.com. We will respond within the timeframe required by applicable law. You may also lodge a complaint with your local data-protection authority.
The service is not directed to children under 13 (or the higher minimum age in your jurisdiction), and we do not knowingly collect personal information from them. Discord's own minimum-age requirements also apply to sign-in. If you believe a child has created an account, contact us at halvenlabs@gmail.com and we will delete it.
Our servers and providers are located in the United States. If you use the app from outside the United States, your information is transferred to and processed in the United States under this policy and our providers' safeguards.
Push notifications are the core of the service. You control them at three levels: per-channel toggles and sound choice inside the app, the operating system's notification settings for the app, and by signing out or deleting your account (which deregisters your device entirely). Disabling notifications at the OS level stops alerts but does not delete your account.
If we change this policy, we will update this page and its effective date. Material changes will be reasonably highlighted here. Continued use of the app after a change takes effect constitutes acceptance of the updated policy.
For any question, request, or concern about privacy or this policy:
Email: halvenlabs@gmail.com