POINT CROW LLC | WEBSITE PRIVACY NOTICE

Last Update: June 27, 2025

Welcome to Nuzlocke.in!

This Privacy Policy explains how we, Point Crow LLC, collect, use, and share personal data when you use this website and related online channels (the “Services”), including streaming embeds, community spaces, and online tournaments.

If you are looking for information about our webstore, please review its separate terms and privacy disclosures (they control all purchase-related data).

By accessing the Services you acknowledge that you have read and understood this Notice. If you do not agree, do not use the Services.

We do not sell your personal data. We collect only the information needed to operate, secure, and improve the Services as described below.

I. WHO CONTROLS YOUR DATA

Except where noted in this notice, we are the data controller for personal data collected through our website, community spaces, and online tournaments. That means we decide why and how your information is processed.

Our Services may embed or link to platforms such as Twitch, YouTube, Discord, Google Analytics, and payment processors. When you engage with those services, they act as separate data controllers under their own privacy terms. We do not determine their purposes or means of processing.

If you have questions about how we handle your data, or wish to exercise a privacy right, contact us at [email protected]

II. DATA COLLECTION

Our Services are intended for individuals who are at least thirteen years old. We do not knowingly collect personal data from anyone under that age. If you believe a child has provided data, contact us so we can delete it.

The information we collect depends on how you use the Services but generally includes the following categories.

III. HOW WE OBTAIN DATA

We collect information in three ways, depending on how you interact with the Services.

A. DIRECTLY FROM YOU

You voluntarily provide data when you:

• Join our mailing list or community spaces;

• Register for an online tournament, giveaway, or other digital event;

• Submit a support request or other inquiry; or

• Post content in chat or comment features.

Typical data includes your display name, email address, preferred game title for the event, and any information you include in your message or post. We do not collect payment card numbers or employment-related materials through the Services.

B. FROM THIRD-PARTY PLATFORMS

When you link or interact with embedded services such as Twitch, YouTube, or Discord, those platforms share limited data with us, for example: your public profile name, user ID, and engagement metrics (likes, follows, chat activity). Each platform controls what it discloses, and its own privacy notice governs that processing.

C. AUTOMATICALLY THROUGH COOKIES AND SIMILAR TECHNOLOGIES

Our website and analytics provider (Google Analytics) use cookies, pixel tags, and log files to collect:

• Internet Protocol (IP) address, browser type, and device information;

• Pages visited and time spent;

• Interactions with embedded streams, videos, or forms.

You can manage cookie preferences at any time using the controls described in VIII. YOUR RIGHTS & CONTROLS.

IV. HOW WE USE YOUR DATA

We handle personal data only when there is a clear purpose and a lawful basis recognized by privacy law.

• Service operation. We collect and store the details you provide when you register for an online tournament, post in our community spaces, or request support, because doing so is necessary to perform the agreement that allows you to use the Services.

• Security and compliance. We log IP addresses, device information, and unusual activity to detect fraud, protect the Services, enforce our Terms, and respond to lawful requests from authorities. These actions are required to meet our legal obligations and to pursue our legitimate interest in keeping the platform safe.

• Service improvement. We analyze aggregated traffic data, error reports, and feature use to understand how visitors interact with the website and to develop new content. This processing rests on our legitimate interest in maintaining and improving the Services without disproportionately affecting your rights.

• Transactional and informational messages. We send confirmations, event reminders, policy updates, and other non-promotional notices so that you receive the Services you have requested. This communication is necessary to perform our contract with you.

• Marketing communications. We send newsletters or special offers only if you have given us explicit consent. You may withdraw consent at any time by using the unsubscribe link or by contacting us.

• Protection of vital interests. In the unlikely event that we become aware of a credible threat to someone’s safety, we may process and share relevant data to prevent harm. This processing is permitted because it is necessary to protect vital interests.

We do not carry out automated decision-making that produces legal or similarly significant effects.

V. WHEN WE SHARE DATA

We disclose personal data only when it is necessary, lawful, and consistent with this Notice.

• Service providers. We engage trusted companies to host the website, deliver email updates, provide customer-support software, run site analytics, and manage online tournament brackets. Each provider receives only the information required to perform its task and must keep it confidential.

• Legal and safety disclosures. We may release information if we believe it is reasonably needed to comply with law, enforce our Terms, protect the rights or safety of our users, or respond to a valid legal request such as a subpoena or court order.

• Business transfer. If we sell or transfer part or all of our assets, personal data may move as part of the transaction. We will give you notice before your information becomes subject to a different privacy notice.

• With your consent. We will share personal data with third parties for any other purpose only after you have given us express permission.

• Public content you choose to post. The username, messages, and other material you share in our chat rooms, comment sections, or Discord server are visible to anyone who can access those spaces. Think carefully before posting personal information. We do not control how others may copy or redistribute content you make public.

We do not run targeted advertising networks on the site and we do not grant third parties independent rights to use your information for their own marketing.

VI. DATA STORAGE & RETENTION

Personal data collected through the Services is held on secure servers in the United States, operated by our cloud-hosting provider. For reliability those servers may be mirrored in other jurisdictions. By using the Services you acknowledge that your information may be transferred to and processed in countries whose privacy laws differ from your own. Where local law demands additional safeguards, we rely on recognized mechanisms such as standard contractual clauses.

We keep personal data only while it serves a lawful purpose, then delete or anonymize it. Specifically:

• Contact and community-account details remain on file until you unsubscribe or ask us to erase them, at which point they are deleted within thirty days unless law requires a longer period.

• Tournament registration records stay until the event ends and any prizes are delivered, then move to an audit archive for up to one year.

• Server log files and analytics data persist for no more than twenty-four months.

• Encrypted backup copies are purged automatically on a rolling ninety-day cycle.

We may retain information longer when doing so is necessary to comply with legal obligations, resolve disputes, enforce our terms, or protect the security of the Services. When data is no longer required, we either delete it or irreversibly anonymize it so that it can never again be linked to you.

To request deletion of your personal data, contact us. Valid requests are honored within thirty days unless an exception applies.

VII. HOW WE KEEP YOUR DATA SECURE

We apply layered security controls designed to protect personal data from accidental loss, misuse, or unauthorized access.

• Technical measures include encryption in transit (TLS), encryption at rest on our cloud databases, multifactor authentication for administrative consoles, firewall and network-segmentation rules, and continuous vulnerability scanning.

• Organizational measures include strict access permissions based on business need, background-checked personnel, and mandatory security-awareness training.

• We bind every service provider that handles personal data for us to written confidentiality and security obligations that are at least as protective as our own.

Security is a shared responsibility. Please keep your passwords and any platform credentials private. If you believe your account or our systems have been compromised, notify us immediately.

No security program is perfect. If a data breach occurs that is likely to result in a risk to your rights or freedoms, we will inform you and the relevant authorities as the law requires and will take steps to limit any harm.

VIII. YOUR RIGHTS & CONTROLS

You have both statutory rights and practical tools for managing your personal data.

A. YOUR PRIVACY RIGHTS

Depending on where you live, you may:

• Know & access the personal data we hold about you, the purposes for which we use it, the sources we obtained it from, and the third parties who receive it.

• Delete personal data that is no longer required for a lawful purpose.

• Correct inaccurate or incomplete personal data.

• Withdraw consent for any activity that relies on your consent (for example, marketing emails).

• Object or restrict processing based on our legitimate interests.

• Opt-out of sale or sharing. We do not sell personal data, but you may direct us not to sell or share it in the future by emailing “Do Not Sell or Share My Personal Data.”

• Complaint to a data-protection authority if you believe we mishandled your request.

B. HOW TO EXERCISE YOUR RIGHTS

Email [email protected] with the right you wish to exercise and enough information for us to verify your identity (or that of an authorized agent). The response period begins once verification is complete. We will reply within one month unless the law requires a faster answer. Some requests may be limited when we must keep data for legal obligations or to defend claims. We will not deny services, charge different prices, or reduce quality because you exercise a privacy right.

C. HOW TO USE BUILT-IN CONTROLS

You decide how much information you share and how we may use it. You can (i) click “unsubscribe” in any marketing email, (ii) adjust non-essential cookies via the banner or your browser, and (iii) email “Do Not Sell or Share My Personal Data” if you are a California resident (each described in the sections above).

Our website embeds or links to platforms such as Twitch, YouTube, and Discord. Those services collect and use your information under their own policies. You can manage what they share with us by adjusting the privacy settings in each account:

• Twitch - see Settings ▸ Security and Privacy.

• YouTube / Google - see Google Account ▸ Data & Privacy.

• Discord - see User Settings ▸ Privacy & Safety.

If you believe your account with any third-party platform has been compromised, contact that platform directly.

X. GENERAL PROVISIONS

A. POLICY UPDATES

We may update this Privacy Policy to reflect changes in our practices or in law. Significant changes will be posted here and, where appropriate, notified to you directly.

B. CONTACT US

If you have questions about this Policy or our privacy practices, please contact our Data Protection Team.

Data Protection Team
2804 Gateway Oaks Dr Suite 100
Sacramento, CA 95833
[email protected]

C. CONTACT A DATA PROTECTION AUTHORITY (DPA)

If you have a concern about how we may collect and use data, please contact us. You also have the right to contact your local Data Protection Authority (“DPA”) if you prefer.

To contact your local DPA, refer to the links below:

• EEA - DPA Directory

• UK - Information Commissioner’s Office (ICO)

• Canada - Office of the Privacy Commissioner (OPC)

Where appropriate, your local DPA may also forward the matter to the Department of Commerce or FTC for consideration.

Last Updated: June 27, 2025