Worth a Master Ball?

This is a small, fan-made tool with no accounts, no email collection, and no advertising. This page describes exactly what data it does handle - kept short on purpose, because the actual footprint is small.

What we collect, and why

Your IP address, hashed

Used only to rate-limit voting/browsing and stop scripted abuse. It's cryptographically hashed the moment a request arrives - the original address is never stored, logged, or written anywhere. The hash itself is kept for up to an hour, then automatically deleted.

A random ID in your browser

When you vote on whether a Pokémon is worth it, we generate a random id (not tied to your name, email, or any account) and store it in your browser's local storage. It exists only so we can stop the same browser voting twice on the same Pokémon - it isn't used to track you across the site or anywhere else.

Which way you voted

Tied to that random browser id, kept for up to 30 days and then automatically deleted. The yes/no totals shown on each Pokémon's page are aggregate counts, kept indefinitely as anonymous statistics - once your individual record expires, there's nothing left linking a specific vote back to you.

Which Pokémon pages get viewed

Used to power the "most searched Pokémon" list on the homepage - counted as anonymous, aggregate totals per species, not tied to any individual visitor.

What we don't collect

No accounts or logins, no names or email addresses, no payment information, no advertising or cross-site tracking cookies, and we never sell data to anyone.

Why we're allowed to process this

Under GDPR, this relies on legitimate interest (Article 6(1)(f)) - keeping the site secure and functional, and stopping abuse of the voting/browsing endpoints. It's the minimum needed for that, kept for the shortest useful time.

Who we share it with

The site runs on Vercel (hosting and anonymous, cookie-free analytics) and Upstash (the database behind votes and popularity). Both process data on our behalf as needed to run the site - see their own policies for how each of them individually handles it.

Your rights

You can ask what data we hold about you, or ask us to delete it. In practice there's very little to find - most of what's described above is either already anonymous or auto-deletes within an hour to 30 days on its own. Clearing your browser's local storage removes your local vote record immediately; the corresponding server-side record expires on its own shortly after regardless. Questions or requests: contact@worthamasterball.com.

Changes to this policy

If what this site collects ever changes, this page will be updated to match. Last updated 2026-08-15.