Privacy Policy

Last updated: 2026-05-10 · Effective for BoltBeam web app and BoltBeam iOS app v1.0+

BoltBeam is committed to collecting as little data as possible. This page is the complete inventory of what we collect, why, and what we never do.

What we don't collect

• No accounts, no logins, no passwords, no email addresses.
• No name, location (GPS or otherwise), phone number, contacts, photos, or microphone access.
• No tracking across other apps or websites. No advertising IDs (IDFA).
• No payment information (we don't sell anything in v1).

What we do collect

Push notification token (iOS only, opt-in). If you enable notifications, your iOS device sends us an APNs token — a random string Apple uses to deliver push messages. We pair it with a per-device UUID we generate on first launch (stored in iOS Keychain via Capacitor Preferences). The pair is stored in our database (Cloudflare D1) so we can deliver the daily "top movers" notification. We never link this token to a name, email, or any external identity.

Crash and error reports (anonymous). When the app or website crashes, we send a stack trace to Sentry to help us fix bugs. Sentry receives no personal information. We tag events with a release version and "web" or "native" platform but nothing else.

Standard server logs. Our hosting provider (Cloudflare) logs IP addresses, user agents, and request paths for security and abuse prevention. Cloudflare retains these for a short period per their own policy and we don't have direct access to them. We don't analyze or aggregate them.

Third-party services

• Cloudflare — hosting, edge caching, DDoS protection. Cloudflare privacy policy.
• Apple Push Notification service (APNs) — message delivery to iOS devices, only when you opt in to notifications. Apple privacy policy.
• Sentry — crash reporting. Sentry privacy policy.
• Bulbapedia, Serebii, Limitless TCG — public battle, mission, and decklist data we cross-reference. We never send these services anything about you; we only fetch their public data. Deck links you tap open the Limitless Deck Builder in your browser, at which point their own privacy policy applies.

Children

BoltBeam is intended for general audiences and rated 4+ by Apple. We don't knowingly collect any data from children under 13. The app collects no personal data at all, so we don't have a different process for under-13 users.

Your rights

You can revoke push notifications anytime via iOS Settings → BoltBeam → Notifications. When you do, your APNs token stops working, and our daily worker auto-marks it disabled the first time a send fails.

You can delete the BoltBeam app and all on-device storage is gone. To proactively remove your push token from our database, email [email protected] from any account and we'll delete the row(s) tied to your last-known device UUID. We respond within 7 business days. (We can't delete without the device UUID — we have nothing else to identify you by.)

Changes

If we ever change this policy in a way that affects what we collect, we'll post the change here with a new "Last updated" date. The version of this page in the app at the moment of your install is what governs your data.

Contact

Built by a solo developer in Luxembourg. Privacy questions: [email protected].

BoltBeam is an unofficial fan-made companion. Not affiliated with Nintendo, The Pokémon Company, or Game Freak. About + disclaimer.