Privacy policy

Last updated : 2 September 2026

GogoRaid exists so you can swap Pokémon GO friend codes. For that to work, your friend code and your trainer name are visible to everyone — that is the whole point of the site, and the reason you came.

The rest of this page says exactly what else we collect, why, where it lives, and how you can get it back or make it go away.

What is public, and that is on purpose

When you post a friend code, this is visible to any visitor, with no account:

  • your twelve-digit friend code
  • the trainer name you chose
  • your team (Mystic, Valor or Instinct)
  • your country, if you filled it in
  • your Vivillon region, if you filled it in
  • your trainer level

So put nothing in your trainer name that you would not tell a stranger. Your email address is NEVER published.

A posted friend code disappears on its own after seven days. That is not a legal precaution, it is the product: an expired code is no use to anyone.

What we collect, and why

Your account. An email address and a password, so you can come back and edit your card. We never have access to the password: it is encrypted by our database host, which alone checks it. The address is used to confirm your sign-up and to reset your password — nothing else, and we do not write to you.

Your trainer profile. Trainer name, friend code, team, level, country, Vivillon region, avatar image. You enter them, and you can change or clear them at any time from your profile.

The raid waiting list. If you sign up on the Raids page, we keep your address, your country, the raid tiers you are after, your language, and which link brought you. That last one tells us which announcements work; it is not there to follow you around.

Traffic measurement, ONLY IF YOU ACCEPT IT. We use Google Analytics to see how many people visit and which pages they open. Until you accept, nothing is loaded and nothing is sent — not even a request. If you decline, you are simply invisible to us.

Bot protection. At sign-up, a Cloudflare Turnstile check confirms you are not an automated program. It looks at browser behaviour, not at who you are.

Technical logs. Our host records incoming requests, with IP address and browser type, as any server does. They are used to spot outages and abuse.

What we do not do

This section exists because the previous version of this page claimed otherwise, copied from a generic template. To be clear:

  • no advertising on this site, therefore no advertising cookies
  • no advertising partners, no ad network
  • we do not sell or rent your data to anyone
  • no profiling, no automated decisions about you
  • no reselling of your email address

Where your data lives, and for how long

Your account and profile are stored with Supabase, on servers in Frankfurt, in the European Union. The site itself is hosted by Vercel.

Google Analytics and Cloudflare Turnstile are US services: accepting traffic measurement means data is transferred to the United States. That is exactly why we ask rather than assume.

How long: a posted friend code, seven days. Your account and profile, for as long as you keep them — they go when you delete your account. Technical logs follow our host's retention policy.

Cookies and browser storage

Only three things are kept in your browser:

  • your sign-in session, without which you would be logged out on every page
  • your answer to the measurement banner, so we do not ask again on every visit
  • Google Analytics cookies, and only if you accepted

The first two are necessary for the site to work and do not require your consent. The third does, and that is what the banner is for.

Changing your mind about measurement

A “Traffic measurement” link sits at the bottom of every page. It asks again, whatever you answered before. Withdrawing consent has to be as easy as giving it, and it is.

Your rights

European law gives you the right to see your data, correct it, erase it, get a copy of it, and object to its processing.

For most of these you need no one: your profile can be edited and emptied from the Profile page, and a friend code can be pulled from the list. To delete your account entirely, or for anything else, write to contact@gogoraid.com.

If our answer does not satisfy you, you can refer the matter to your national data protection authority — in France, the CNIL.

Children

Pokémon GO is played at every age, and we know it. GogoRaid does not ask your age and does not try to work it out. If you are the parent of a child who created an account and you want it removed, write to contact@gogoraid.com: we will do it, no questions asked.

Contact

contact@gogoraid.com. Any question about this page is answered there.