Privacy Policy

When you create an account or use the site, we collect:

• Account details you give us directly: email address, display name, and your Pokémon TCG Pocket friend code. Your password is stored as a salted hash by our authentication provider; we never see it.
• Trading content you create on the platform: the cards in your inventory and wishlist, postings you publish, trades you complete, messages exchanged with other trainers, and comments on offerings.
• Technical data automatically generated by your visit: IP address, browser type and version, device type, referring URLs, pages viewed, and timestamps. We use this for operating the service, debugging, and protecting against abuse.
• Cookies and similar technologies — see the Cookies section below.

We do not sell your personal information.

• To operate the trading platform: matching you with other traders, delivering messages, rendering the feed.
• To maintain account security, prevent fraud, and enforce our terms.
• To send transactional emails — confirmations, password resets, exchange notifications.
• To improve the product based on aggregated usage patterns.
• To comply with legal obligations and respond to lawful requests.

We do not use the contents of your messages or your trading history to personalise ads.

To operate Goldenrod we rely on third-party service providers. Each is bound by a data processing agreement that limits their use of your data to the services they provide to us. The categories we use are:

• Cloud hosting and content delivery — to serve the website and process incoming HTTP requests, including IP addresses, user-agent strings, and request metadata.
• Database and authentication — to store your account credentials, profile, trading inventory, postings, messages, and other content you create on the platform.
• Transactional email delivery — to send confirmations, password resets, and exchange notifications to your email address.
• Advertising — see the Advertising section below for the named vendors and your opt-out choices.
• Analytics — see the Analytics section below for the named vendor and your opt-out choices.

These providers operate primarily in the United States. Where required, transfers of personal data outside your country of residence are protected by standard contractual clauses or equivalent safeguards. We will name a specific vendor on request — write to us at the address in the Contact section.

Goldenrod uses Google AdSense to display ads, which is what keeps the service free for trainers.

• Google, as a third-party vendor, uses cookies — including the DoubleClick DART cookie — to serve ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to Goldenrod and/or other sites on the Internet.
• You can opt out of personalised advertising at any time via Google's Ads Settings, or learn more about how vendors use cookies for personalised advertising at aboutads.info.
• For visitors in the European Economic Area, the United Kingdom, and Switzerland, we use Google's Funding Choices consent-management tool to collect your advertising preferences before personalised ad cookies are set.

Goldenrod uses Google Analytics 4 to understand how trainers use the site in aggregate — which pages get visited, where users drop off, how features perform. The data helps us prioritise improvements.

• Google Analytics sets first-party cookies (typically _ga and _ga_<property-id>) and receives data including IP address, device type, browser, referring URLs, and pages viewed.
• We do not link analytics data to your account email or other directly identifying information we hold about you.
• You can opt out of Google Analytics across all sites by installing the Google Analytics Opt-out Browser Add-on, or by blocking third-party cookies in your browser.

We use cookies for two purposes:

• Essential — to keep you signed in and remember your session. The site cannot function without these.
• Advertising and analytics — set by Google AdSense and Google Analytics. These can be opted out of as described above, or by blocking third-party cookies in your browser.

You can clear cookies in your browser settings at any time, but doing so will sign you out of your account.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct, update, or delete that information.
• Withdraw consent for processing where consent is the legal basis.
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@lynbrooklabs.com. You can also delete your account at any time from your profile page; account deletion permanently removes your profile, inventory, wishlist, postings, and messages from our active database.

California residents:the California Consumer Privacy Act and the California Privacy Rights Act define personalised advertising involving the disclosure of personal information to advertising vendors as a “sale” or “share.” You can opt out of this by adjusting your settings via Google's Ads Settings linked above, or by enabling Global Privacy Control in your browser, which we will honour.

We keep your data for as long as your account is active. After you delete your account, we remove personally identifying data from our active systems within 30 days, except where we are required to retain it for legitimate business or legal reasons (such as fraud prevention, tax records, or pending disputes). Aggregated and anonymised data may be retained indefinitely.

We protect your data with industry-standard measures: encryption in transit (HTTPS everywhere), hashed passwords, scoped database access controls, and least-privilege service credentials. No system is perfectly secure; if you discover a vulnerability, please report it responsibly to privacy@lynbrooklabs.com.

Goldenrod is not directed at children under 13 (or under 16 in jurisdictions where that is the relevant minimum age for online consent). We do not knowingly collect personal information from children below those ages. If you believe a child has created an account, please contact us and we will delete it.

Goldenrod is operated from the United States. If you access the site from outside the United States, your data will be transferred to and processed in the US (and other countries where our service providers operate). We rely on standard contractual clauses and similar mechanisms to protect international transfers where required.

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. We will notify you of material changes via email or an in-app notice before they take effect.

Pokémon, Pokémon TCG Pocket, and related logos are trademarks of Nintendo, Game Freak, Creatures Inc., and The Pokémon Company. Goldenrod is an independent fan-made trading platform and is not affiliated with, endorsed, sponsored, or specifically approved by any of those entities.

For privacy questions, data requests, or anything else covered by this policy, write to privacy@lynbrooklabs.com.

← Back to Goldenrod