The short version.

Pokénnoisseur doesn't sell your data and doesn't have user accounts on this website. What is collected, including the one advertising pixel we run, is described below in full.

Who runs this site

Pokénnoisseur is operated by 9577-4030 Québec inc., a Québec corporation doing business as Pokénnoisseur, at 130-5645 boul Grande Allée, Unit #224, Brossard, Québec, J4Z 3G3, Canada. The corporation took over the business, and the personal information it holds, from the sole proprietorship that ran it before October 13, 2026. The President of 9577-4030 Québec inc. is the person in charge of the protection of personal information. Reach the privacy officer at [email protected] or through the Contact page.

What is collected on this website

Standard server logs from Cloudflare, our hosting provider. These contain the IP address, browser user agent, and the URL of the page you requested. Cloudflare retains these for a short period to filter abuse and prevent attacks. They are not used to build a profile of you, and we do not consult them to identify individual visitors.

That's it for the website itself. No Google Tag Manager and no fingerprinting. There is one advertising pixel, from TikTok, described under Advertising measurement below.

Audience measurement

We use GoatCounter, a privacy-friendly analytics tool, to count page views and see which pages are popular. It is cookieless: it sets no cookie and does not build a profile of you or track you across other sites. It records the page URL, the referring page, and a coarse browser and country signal. We use this only to understand what content is useful.

We also use PostHog (hosted in the EU), a privacy-friendly product-analytics tool, to understand how visitors move through the site and how people join our community. It is cookieless: it sets no cookie, and it stores a random local identifier in your browser so repeat visits on this site count as one person. It does not track you across other sites, and session recording is turned off. It records page views, clicks, the referring page, a coarse browser and country signal, and the steps of the membership sign-up (which tier, and completion). We use this only to improve the site.

Advertising measurement

We run ads on Meta (Facebook and Instagram) and on TikTok to reach Canadian collectors. To know whether those ads work, we measure conversions on two platforms.

Meta is measured server-side only, using Meta's Conversions API. There is no Facebook pixel on the page. When you arrive from one of our ads, or click a "Join the Discord" button, or submit the PSA calculator, our server sends Meta a single event so the click can be matched to its ad. The identifiers shared are your IP address, your browser user agent, the Meta click identifier from the ad link, and two identifiers we generate and keep in your browser's local storage: a random identifier for your browser, and a browser identifier in the format Meta expects. Neither is derived from anything you told us, and neither is used to track you on any other website. If you submitted the calculator with your email, a one-way hashed (SHA-256) version of that email is included. Your email is never sent to Meta in readable form, and we do not share your card data or your calculator results. You can limit this through your Meta ad preferences.

TikTok works differently and it is the one place we load a third-party advertising script. On most pages of this site, a TikTok pixel is loaded and it sets a cookie in your browser called _ttp, which TikTok uses to recognise the same browser across visits and match it to an ad click. The same events are also sent server-side through TikTok's Events API, with the same identifiers listed above for Meta plus the TikTok click identifier and the value of that _ttp cookie. You can limit this through your TikTok account privacy settings, and you can clear the _ttp cookie from your browser at any time.

If you buy a membership, we send Meta and TikTok one additional event recording that a purchase happened, its amount, and which tier. So that the purchase can be matched to the ad that led to it, that event carries more about you than the events above: a one-way hashed (SHA-256) version of your email address, your name, and the city, province, postal code and country from the billing details you gave Stripe, together with a hashed pseudonymous identifier derived from your Discord account. Every one of those is hashed before it leaves our server — none of it is sent in readable form, and we never send your card number or anything else about your payment. To connect the purchase back to the original ad click, we hold the identifiers described above (including your IP address) in our own storage, at Cloudflare, for up to 72 hours, after which they are deleted automatically. If you are in Québec and have not accepted advertising measurement, none of this is collected or sent at all.

Where consent applies. If you are in Québec, neither Meta nor TikTok measurement runs at all until you accept "Advertising measurement" in the banner, and the TikTok pixel is never loaded until then. If you are outside Québec, this measurement is enabled by default when you arrive, without a banner, as is permitted elsewhere in Canada. You can turn it off at any time using Privacy choices in the footer of any page; that choice is remembered and applies from your next page load on.

If you join the Discord

Discord membership is governed by Discord's own privacy policy. Your Discord handle is visible to other members of the server.

Our bot also keeps the records below, each tied to your Discord user ID. We use each one only for the reason given and delete it on the schedule given.

• Buy/Sell/Trade rules. When you accept the rules: your user ID, username, the rules version and the time. This is our record that you agreed before getting access. Kept while you are in the server, and deleted 90 days after you leave.
• Giveaways. When you enter: your user ID, username and language. Deleted 30 days after that giveaway's draw. So that anyone can check a draw was fair, we post the list of entrants in the server as one-way codes, together with the value used to make them. That means someone who already knows your Discord user ID can check that you entered. If you win: your user ID, the prize and the date, kept for the winner waiting period plus one month (four months today), so the "one win per period" rule can be applied.
• Founder offer. If you asked for or received a founder code: your user ID, username, the code and when it was sent. Deleted 90 days after the last code was issued.
• Moderation. Warnings and strikes, reaction-rule offenses, and the moderator's reason. A strike stops counting after 90 days, and each record is deleted 12 months after it was made. Moderation actions are also posted in staff-only channels of the server.
• In-store reports. If you send us an in-store stock report through the site: your user ID with the report and the moderator's decision, kept 12 months.
• Private channels and watches (paid). If you have a private alert channel or a private watch: your user ID, a short name for you, and the products and price limits you asked us to watch. They are kept in our own configuration while the channel or watch is active. That configuration is stored in our code history, so removing it later does not erase older versions. When a private channel ends, a record of the access we removed (so it can be given back) is kept 90 days.
• Product tracking requests. The store and product you asked us to track, until you stop tracking it, or 7 days after your paid access ends.
• Roles. For paid members, which paid roles you hold, so we can give them back if you leave and rejoin. Deleted 180 days after you last held one. We also take occasional snapshots of who holds which role, to undo mistakes. Dated copies are deleted after 30 days, and the latest one is replaced each time.
• App and phone alerts. If you use our app: your user ID, membership tier, the alert topics and mutes you picked, and your devices' notification addresses. Deleted when you delete your account in the app, or 90 days after your paid access ends.
• Technical logs. Our bot's logs can include your user ID and username. They are deleted within two months.

In-store sightings search. On our in-store sightings page you can enter a postal code to see nearby stores. That search runs entirely in your browser: your postal code is not sent to us, not stored, and not put in the page address. The page loads no analytics or advertising scripts. Store locations are matched to the general area of your postal code, so distances are approximate.

In-store area alerts (paid members). If you turn these on, we store up to five postal areas (the first three characters of a postal code, never a full code) with your Discord user ID, on our own server, only to send you matching in-store alerts from Shoppers Drug Mart, Mastermind Toys, London Drugs and Canadian Tire by Discord direct message. We also store which of those stores you picked, the distance you chose if you asked for stores near your areas (off unless you pick one; distances are approximate, measured from the middle of each area), and any product and store you mute by reacting to an alert. You can clear all of it at any time in the setup channel, which deletes it immediately. If your paid access ends or is paused, your areas stop being used and are deleted after 30 days, along with your distance, store choices and mutes, unless your access comes back first. If you choose Shoppers channel pings instead, the keywords you set are stored by Zephyr Monitors, the third-party service that sends those pings, under its own terms, and your pings are visible to other paid members in that channel.

If you buy a membership

Payments are processed by Stripe. Your card details go directly to Stripe and are never seen by, or stored on, this site. Stripe holds your name, email, billing country and payment details under its own privacy policy. Stripe also stores your Discord user ID with your payment, which is how the paid role reaches the right account. Billing records are kept for as long as tax law requires.

To give you the paid role in Discord, we store a small record linking your Discord user ID to your Stripe customer ID, along with which tier you bought and whether the membership is active. That record lives with Cloudflare, our hosting provider. If you cancel or are refunded, the record is marked inactive and is automatically deleted after 90 days, so the link between your Discord account and your payment record does not persist indefinitely.

We import our Stripe billing records (payments, refunds, subscriptions and invoices, never card numbers) into PostHog, hosted in the EU, so we can see basic business numbers like revenue, cancellations, and how many members we have. This is our own accounting and business reporting, not website tracking, and it is kept separate from the website measurement described above: these billing records are not joined to your browsing activity to build a profile of you.

One link does exist between the two, and only at the moment of purchase. When a completed purchase returns you to our site, we record the conversion against a pseudonymous identifier: a one-way, salted hash of your Discord user ID. It cannot be reversed back to your Discord account and it is never shared with anyone. Its only purpose is so that a single purchase is not counted twice when the payment journey moves you between browsers or apps. Like all site measurement, it runs only if you are outside Québec or have accepted audience measurement. A separate pseudonymous identifier, also derived from your Discord account but computed with a different secret key so the two cannot be matched to each other, is sent to Meta and TikTok with the purchase event described under Advertising measurement.

If you start a free trial

To allow one free trial per person, we keep a permanent record that a trial was used, made of a one-way, salted hash of your Discord user ID and a one-way, salted hash of the card's fingerprint (an identifier Stripe gives the card, never the card number). Neither can be reversed back to your account or your card; they are used only to refuse a second trial.

If you use the PSA calculator

The PSA EV calculator asks for your email so it can send you your results. When you submit it, we keep one record for that email address. The record holds your email, your language, the card and the figures you entered, your most recent results, the time you submitted, and your IP address, browser user agent, country and city as reported by Cloudflare.

That record is stored with Cloudflare and is kept for 12 months from your most recent submission, then deleted automatically. It is used to send you your results, to avoid re-asking you for the same information, and to understand which cards people are valuing. It is not sold, and it is not shared with anyone except the providers named on this page.

The results email is sent through Resend, our email provider. If we are running a mailing list at the time you submit, your email may also be added to it so we can send occasional Pokénnoisseur updates; every such email carries an unsubscribe link, and unsubscribing does not affect your results email. You can ask us to delete the whole record at any time by writing to [email protected].

Cookies and local storage

The only cookie this website is responsible for is the TikTok advertising cookie _ttp, described under Advertising measurement. It is set only when advertising measurement is active. Cloudflare may separately set a session cookie called __cf_bm to distinguish humans from bots; this is functional and expires within 30 minutes. Discord and Stripe set their own cookies on their own domains when you visit them.

If you are in Québec and make a consent choice (see below), we save that choice in your browser's local storage under the key pk_consent so we don't ask again on every visit. It holds only your two yes/no choices, a timestamp, and a region tag. It is not a tracking identifier and is never sent to anyone.

When advertising measurement is active, we also keep up to four advertising identifiers in local storage: pk_ext (a random identifier for your browser, which we generate), pk_fbp (a browser identifier in the format Meta expects, which we also generate), pk_fbc (the Meta click identifier from an ad link you followed) and pk_ttclid (the TikTok equivalent). Unlike pk_consent, these are tracking identifiers and they are shared with Meta and TikTok, as described under Advertising measurement. They are never created for a Québec visitor who has not accepted advertising measurement, and turning advertising measurement off through Privacy choices deletes them. You can also clear them by clearing this site's data in your browser.

Your consent choices (Québec)

If you visit from Québec, a banner asks for your consent before any non-essential measurement runs. Until you choose, audience measurement and advertising measurement stay off. The banner has two separate purposes you can accept or refuse independently:

• Audience measurement: the cookieless PostHog and GoatCounter measurement described above.
• Advertising measurement: the Meta and TikTok conversion measurement described above, including the TikTok pixel and its _ttp cookie.

You can change your mind at any time. Select Privacy choices in the footer of any page to reopen the banner and update or withdraw your consent. Withdrawing takes effect immediately for future page loads.

Affiliate links

Some outbound links to Amazon and other retailers are affiliate links. Clicking one sends you to the retailer's site and may attribute the visit to Pokénnoisseur for commission purposes. The retailer collects whatever they would normally collect from any visitor. We don't receive personally identifying information about you from these links, only aggregate reports of clicks and purchases.

Your rights (Québec Law 25 / Canadian PIPEDA)

You can ask what information is held about you, ask for it to be corrected, or ask for it to be deleted. Email [email protected] with the request and you'll get a reply within 30 days. There's no form to fill out.

A few records are kept after a deletion request, and only for as long as their purpose needs them: the Buy/Sell/Trade agreement while you still have that access (deleting it also removes the access), billing records that tax law requires us to keep, the one-way free-trial record described above, and an active membership's link to your Discord account until the membership is cancelled. Messages already posted in the server and older versions in our code history may also remain.

Changes to this policy

If we change anything material, the date at the top of this page changes and a dated entry is added below. Material changes are also announced by email to members and to people whose email address we hold.

November 4, 2026. In-store area alerts can now also include stores within a distance you choose of your areas. We store that choice with your areas and delete it with them. Nothing more about where you are is collected.

November 3, 2026. The section on joining the Discord used to say we keep no member data from Discord beyond what Discord keeps. That was not accurate. It now lists every record our bot keeps about members, why, and when each is deleted. We also set deletion schedules where there were none, and added what is kept after a deletion request.

October 13, 2026. The business, and the personal information it holds, moved from a sole proprietorship to 9577-4030 Québec inc. Nothing about what we collect or how we use it changed. The President of the corporation is now the person in charge of the protection of personal information.

October 9, 2026. Added In-store area alerts for paid members: the postal areas, store choices and mutes we keep for them, and when they are deleted.