Privacy policy

Last updated: 3 November 2026

Who is responsible

The data controller is Nova Holding OÜ, a company registered in Estonia (registry code 17433430, VAT number EE102953453), Narva mnt 5, 10117 Tallinn, Estonia, which runs Kaizo Bridge. Contact: andrew.delcorso@gmail.com.

Playing without an account

You can play without an account. In that case none of your data reaches our servers: your FireRed ROM, your runs, your saves and your language choice stay in your browser's storage (IndexedDB and localStorage) on your device, and are never uploaded. The ROM is checked on your device and is never sent anywhere.

Like any website, the hosting provider (Netlify) receives the technical data of each request, such as your IP address, browser and the page requested, to deliver the site and keep it secure (legitimate interest, art. 6(1)(f) GDPR).

With an account

Data	Why	Legal basis
Email, player name, password (stored only as a scrypt hash, never in clear), date of sign-up and of acceptance of these terms	To create and run your account; your player name will be public on the leaderboards	Contract (art. 6(1)(b))
Run history: run number and build, start, update and end times, result, starter and current Pokémon, level, badges, furthest point on the bridge, play time	To show your runs and, when they open, the leaderboards, ranked seasons and tournaments	Contract (art. 6(1)(b))
Session: a random token in a cookie; the database keeps only its SHA-256 fingerprint	To keep you signed in	Contract (art. 6(1)(b))
Twitch, only if you connect it: your Twitch user ID and name, whether you subscribe to our channel and when we last checked	To unlock the tracker for subscribers	Contract (art. 6(1)(b))
Failed sign-ins: IP address and email of the attempt	To stop password guessing	Legitimate interest (art. 6(1)(f))

Email, player name and password are needed to have an account. Without them you can still play as a guest. We do not use your data for advertising, we do not profile you and we make no automated decisions about you.

Where the data is and who handles it

• Neon (Neon, Inc.) hosts the database, in the AWS Frankfurt region (Germany, EU). Neon privacy policy.
• Netlify (Netlify, Inc.) hosts the site and the server functions. Netlify is a US company: transfers outside the EU rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. Netlify privacy policy.

They act as processors on our behalf.

Twitch (Twitch Interactive, Inc.): when you connect it, you sign in on Twitch and Twitch tells us your user ID and name; we then ask Twitch, with our channel's permission, whether you subscribe. We receive nothing else from your Twitch account and never any payment details. For your Twitch account and your subscription payments Twitch is an independent controller: Twitch privacy notice.

Fonts, scripts and the emulator are served from our own site: there are no third-party trackers, analytics, ads or social buttons. We never sell your data.

How long we keep it

• Account and runs: until you delete your account.
• Session: 30 days, or until you sign out.
• Twitch connection: until you disconnect Twitch or delete your account.
• Failed sign-ins: 15 minutes; they are erased at the latest at the next sign-in or sign-up on the site.
• Hosting logs: for the time set by Netlify.

Your rights

You can ask to access, correct, delete, restrict or move your data, and object to its processing (arts. 15-21 GDPR). Two of these you can do yourself, any time, from Account: Download my data (a JSON file with everything we hold about you) and Delete my account (your account and all your runs are erased at once). For anything else write to andrew.delcorso@gmail.com.

You can also lodge a complaint with a data protection authority: the one of the country where you live or work (in Italy, the Garante per la protezione dei dati personali) or the Estonian Data Protection Inspectorate, which supervises us (Andmekaitse Inspektsioon).

Minimum age

You must be at least 16 to create an account.

Changes

If this policy changes, the date at the top changes too; important changes will be announced on the site.