Privacy Policy  ·  Last updated July 21, 2026

The short version.

Pokénnoisseur doesn't sell your data and doesn't have user accounts on this website. Very little is collected. What is collected, including the one advertising pixel we run, is described below in full.

Who runs this site

Pokénnoisseur is operated as a sole proprietorship by Jacob Forstner, at 87 E-Rue St Pierre, Unit #211, Saint-Constant, Québec, J5A 1G7, Canada. He is the person responsible for the protection of personal information. Reach him at hello@pokennoisseur.ca or through the Contact page.

What is collected on this website

Standard server logs from Cloudflare, our hosting provider. These contain the IP address, browser user agent, and the URL of the page you requested. Cloudflare retains these for a short period to filter abuse and prevent attacks. They are not used to build a profile of you, and we do not consult them to identify individual visitors.

That's it for the website itself. No Google Tag Manager and no fingerprinting. There is one advertising pixel, from TikTok, described under Advertising measurement below.

Audience measurement

We use GoatCounter, a privacy-friendly analytics tool, to count page views and see which pages are popular. It is cookieless: it sets no cookie and does not build a profile of you or track you across other sites. It records the page URL, the referring page, and a coarse browser and country signal. We use this only to understand what content is useful.

We also use PostHog (hosted in the EU), a privacy-friendly product-analytics tool, to understand how visitors move through the site and how people join our community. It is cookieless: it sets no cookie, and it stores a random local identifier in your browser so repeat visits on this site count as one person. It does not track you across other sites, and session recording is turned off. It records page views, clicks, the referring page, a coarse browser and country signal, and the steps of the membership sign-up (which tier, and completion). We use this only to improve the site.

Advertising measurement

We run ads on Meta (Facebook and Instagram) and on TikTok to reach Canadian collectors. To know whether those ads work, we measure conversions on two platforms.

Meta is measured server-side only, using Meta's Conversions API. There is no Facebook pixel on the page. When you arrive from one of our ads, or click a "Join the Discord" button, or submit the PSA calculator, our server sends Meta a single event so the click can be matched to its ad. The identifiers shared are your IP address, your browser user agent, the Meta click identifier from the ad link, and two identifiers we generate and keep in your browser's local storage: a random identifier for your browser, and a browser identifier in the format Meta expects. Neither is derived from anything you told us, and neither is used to track you on any other website. If you submitted the calculator with your email, a one-way hashed (SHA-256) version of that email is included. Your email is never sent to Meta in readable form, and we do not share your card data or your calculator results. You can limit this through your Meta ad preferences.

TikTok works differently and it is the one place we load a third-party advertising script. On most pages of this site, a TikTok pixel is loaded and it sets a cookie in your browser called _ttp, which TikTok uses to recognise the same browser across visits and match it to an ad click. The same events are also sent server-side through TikTok's Events API, with the same identifiers listed above for Meta plus the TikTok click identifier and the value of that _ttp cookie. You can limit this through your TikTok account privacy settings, and you can clear the _ttp cookie from your browser at any time.

If you buy a membership, we send Meta and TikTok one additional event recording that a purchase happened, its amount, and which tier. So that the purchase can be matched to the ad that led to it, that event carries more about you than the events above: a one-way hashed (SHA-256) version of your email address, your name, and the city, province, postal code and country from the billing details you gave Stripe, together with a hashed pseudonymous identifier derived from your Discord account. Every one of those is hashed before it leaves our server — none of it is sent in readable form, and we never send your card number or anything else about your payment. To connect the purchase back to the original ad click, we hold the identifiers described above (including your IP address) in our own storage, at Cloudflare, for up to 72 hours, after which they are deleted automatically. If you are in Québec and have not accepted advertising measurement, none of this is collected or sent at all.

Where consent applies. If you are in Québec, neither Meta nor TikTok measurement runs at all until you accept "Advertising measurement" in the banner, and the TikTok pixel is never loaded until then. If you are outside Québec, this measurement is enabled by default when you arrive, without a banner, as is permitted elsewhere in Canada. You can turn it off at any time using Privacy choices in the footer of any page; that choice is remembered and applies from your next page load on.

If you join the Discord

Discord membership is governed by Discord's own privacy policy. We don't extract or store member data from Discord beyond what Discord itself stores. Your Discord handle is visible to other members of the server.

If you buy a membership

Payments are processed by Stripe. Your card details go directly to Stripe and are never seen by, or stored on, this site. Stripe holds your name, email, billing country and payment details under its own privacy policy.

To give you the paid role in Discord, we store a small record linking your Discord user ID to your Stripe customer ID, along with which tier you bought and whether the membership is active. That record lives with Cloudflare, our hosting provider. If you cancel or are refunded, the record is marked inactive and is automatically deleted after 90 days, so the link between your Discord account and your payment record does not persist indefinitely.

We import our Stripe billing records (payments, refunds, subscriptions and invoices, never card numbers) into PostHog, hosted in the EU, so we can see basic business numbers like revenue, cancellations, and how many members we have. This is our own accounting and business reporting, not website tracking, and it is kept separate from the website measurement described above: these billing records are not joined to your browsing activity to build a profile of you.

One link does exist between the two, and only at the moment of purchase. When a completed purchase returns you to our site, we record the conversion against a pseudonymous identifier: a one-way, salted hash of your Discord user ID. It cannot be reversed back to your Discord account and it is never shared with anyone. Its only purpose is so that a single purchase is not counted twice when the payment journey moves you between browsers or apps. Like all site measurement, it runs only if you are outside Québec or have accepted audience measurement. A separate pseudonymous identifier, also derived from your Discord account but computed with a different secret key so the two cannot be matched to each other, is sent to Meta and TikTok with the purchase event described under Advertising measurement.

If you use the PSA calculator

The PSA EV calculator asks for your email so it can send you your results. When you submit it, we keep one record for that email address. The record holds your email, your language, the card and the figures you entered, your most recent results, the time you submitted, and your IP address, browser user agent, country and city as reported by Cloudflare.

That record is stored with Cloudflare and is kept for 12 months from your most recent submission, then deleted automatically. It is used to send you your results, to avoid re-asking you for the same information, and to understand which cards people are valuing. It is not sold, and it is not shared with anyone except the providers named on this page.

The results email is sent through Resend, our email provider. If we are running a mailing list at the time you submit, your email may also be added to it so we can send occasional Pokénnoisseur updates; every such email carries an unsubscribe link, and unsubscribing does not affect your results email. You can ask us to delete the whole record at any time by writing to hello@pokennoisseur.ca.

Cookies and local storage

The only cookie this website is responsible for is the TikTok advertising cookie _ttp, described under Advertising measurement. It is set only when advertising measurement is active. Cloudflare may separately set a session cookie called __cf_bm to distinguish humans from bots; this is functional and expires within 30 minutes. Discord and Stripe set their own cookies on their own domains when you visit them.

If you are in Québec and make a consent choice (see below), we save that choice in your browser's local storage under the key pk_consent so we don't ask again on every visit. It holds only your two yes/no choices, a timestamp, and a region tag. It is not a tracking identifier and is never sent to anyone.

When advertising measurement is active, we also keep up to four advertising identifiers in local storage: pk_ext (a random identifier for your browser, which we generate), pk_fbp (a browser identifier in the format Meta expects, which we also generate), pk_fbc (the Meta click identifier from an ad link you followed) and pk_ttclid (the TikTok equivalent). Unlike pk_consent, these are tracking identifiers and they are shared with Meta and TikTok, as described under Advertising measurement. They are never created for a Québec visitor who has not accepted advertising measurement, and turning advertising measurement off through Privacy choices deletes them. You can also clear them by clearing this site's data in your browser.

Your consent choices (Québec)

If you visit from Québec, a banner asks for your consent before any non-essential measurement runs. Until you choose, audience measurement and advertising measurement stay off. The banner has two separate purposes you can accept or refuse independently:

You can change your mind at any time. Select Privacy choices in the footer of any page to reopen the banner and update or withdraw your consent. Withdrawing takes effect immediately for future page loads.

Affiliate links

Some outbound links to Amazon and other retailers are affiliate links. Clicking one sends you to the retailer's site and may attribute the visit to Pokénnoisseur for commission purposes. The retailer collects whatever they would normally collect from any visitor. We don't receive personally identifying information about you from these links, only aggregate reports of clicks and purchases.

Your rights (Québec Law 25 / Canadian PIPEDA)

You can ask what information is held about you, ask for it to be corrected, or ask for it to be deleted. Email hello@pokennoisseur.ca with the request and you'll get a reply within 30 days. There's no form to fill out.

Changes to this policy

If we change anything material, the date at the top of this page changes. We do not send a separate notice for policy updates, so check the date here if it matters to you.