Privacy Policy

Effective September 30, 2026

PokeDrops NoVA is operated by 10-20 Labs LLC. Questions or requests can be sent to pokemaster@iwantinthis.com.

What we process

We process your username, optional profile photo, username-change timestamps and moderation history, email address, password hash, account verification information, session tokens, notification preferences and device push tokens to operate your account. Your plaintext password is not stored.

When you submit a store report, we process your precise location and its accuracy to check that you are close enough to the store. Exact submitted coordinates are not retained in our report database. For moderation, admins can see report coordinates rounded to 0.01 degrees (about a kilometer), the location capture time, authorization method, and an approximate city/region name looked up by the app through Apple. These details are private to admin, including for anonymous pings. If location is unavailable for a permitted remote report, no location is invented. The city/region label describes a rounded area, not an exact address. We retain the store, rounded distance (or a marker for visit/remote permission), accuracy, status, product text, line count and range, ghost-chair count, username and report time. A report therefore indicates you were near that store at that time.

Near-me sorting uses location on your device. Every regular ping or sighting update requires a fresh precise location within half a mile of the store. We do not grant after-visit reporting windows. Location is normally used while the app is open. If you enable optional arrival reminders, we request Always location permission to detect entry near followed stores in the background. Arrival reminders are local notifications and never automatically submit reports. The reminder preference, followed-store area cache, and last reminder times are stored on your iPhone; your location used for these reminders is not uploaded to our server. Disable arrival reminders in app Settings to stop monitoring; signing out disables them too. Admin-approved remote permissions can allow reporting from other locations. There is no live map of individual users.

What other people see

Signed-in users can see your store reports, optional submitted photos, comments, product descriptions, line counts and report times. All pings and sighting updates display Anonymous to other users, including older reports. New comments and their optional photos show your current username and optional profile photo. Updating your username or profile photo changes how your named discussion comments are displayed. Anonymous sighting updates and older anonymous comments do not display your profile photo. Photos can only be added to discussion comments, using the camera or photo picker; the app resizes and re-encodes them before uploading. Older comments posted anonymously keep their original privacy setting. Admins can always see which account posted it for moderation. Anonymous posts do not expose your account ID through the app API; they are not anonymous to us or to the hosting provider. Your email address, password, session tokens and device push token are not displayed to other users.

Service providers

Our hosting/database and email providers process data needed to run the service. Apple provides map, directions and notification services. Apple may process data under its own policies when you use those services. Hosting logs may contain IP addresses, request paths and operational information. Rate limiting uses a keyed hash of identifiers rather than storing raw IP addresses in the rate-limit table.

We do not include advertising or analytics SDKs, and we do not sell personal information. We may disclose information when legally required or necessary to protect the service and its users.

Retention and deletion

Sightings, their update history, comments, and photos are scheduled for deletion after 30 days without a sighting update. Deleting a report removes its comments and photo. Older visit grants are no longer used. Sighting update history is retained with its report, and admin can see which account made each update. Unverified accounts are scheduled for deletion after seven days. Expired account codes and sessions are removed during maintenance. Device registrations are removed on logout/password reset or after extended inactivity. You can delete your account from Settings in the app after confirming your password; this deletes associated live account records and reports. Hosting backup and log copies may remain for the provider's retention periods. Contact us for information about those copies or other deletion requests.

Your controls

You can upload, replace or remove your profile photo and change your username once every 15 days, or sooner with a one-use admin override. Profile photos are cropped and compressed on your device before upload; profile photo records and username-change history are deleted with your account. Your map-chain choices are saved per account on this iPhone. You can select stores and alert types, disable notifications, flag inappropriate reports and comments, block users, recover or change your password, and delete your account. Location and notification permissions are also controlled in iPhone Settings. Disabling location prevents regular location-based reports; an admin-approved remote permission can still allow a report. Browsing remains available.

Children and updates

This service is not intended for children under 13. Please contact us if you believe a child under 13 has created an account. We may update this policy as the service changes and will revise the effective date.