Last updated: October 7, 2026
The short version: MunchStats has no accounts, no logins, and no passwords, and it runs no analytics and no ads. You can browse every page without telling us who you are and without being counted. The only things we ever receive are what you choose to type into the contact form or the app tester application. The Android app collects nothing at all. We have never sold data and never will.
MunchStats (munchstats.com) and the MunchStats Android app are run by an individual developer as a non-commercial side project. This policy covers both the website and the app. For anything in it, reach us at the contact address at the bottom of this page.
None. MunchStats used Google Analytics until September 2026. It has been removed and nothing replaced it: there is no analytics script, no tracking pixel, and no fingerprinting anywhere on the site. We genuinely do not measure your visit.
If you send a message through the contact page, we receive:
The message is delivered to a private email inbox. It is not stored in a database and is never used for marketing. We keep messages for as long as it takes to deal with them; you can ask us to delete yours at any time.
Your IP address is used while the form is being submitted — to check the captcha and to enforce the rate limit described below — but it is not included in the message we receive and is not stored anywhere afterwards.
If you apply to test the Android app on the app page, we receive:
The application is delivered to the same private inbox as contact messages. It is not stored in a database and is only used to choose testers and to talk to you about testing. If you are picked, we email you an invite. When a test runs through Google Play, your email address is also added to the app's tester list in the Google Play Console so that your Google account can install the test version; Google handles that under its own privacy policy.
We keep applications for as long as testing runs. You can ask us to delete yours, or to take you off the tester list, at any time. Your IP address is handled exactly as it is for the contact form.
The contact form and the app tester application are protected by Cloudflare Turnstile. When you submit either, your IP address and a challenge token are sent to Cloudflare to confirm you are not a bot. We also keep a short-lived, in-memory count of recent submissions per IP address to rate-limit the two forms together — that list holds at most 1,000 addresses for one hour and is erased whenever the server restarts. It is never written to disk.
The site is hosted on Heroku, whose routing layer keeps standard short-term request logs (IP address, requested URL, timestamp, user agent) for operational and security purposes. We do not build profiles from them.
lang — a cookie remembering whether you chose English or Spanish. Lasts one year.theme — local storage holding your chosen site theme.munchstats.calcImportCollapsed — local storage remembering whether you collapsed the calculator import box.That is the complete list. MunchStats sets no analytics cookies, no advertising cookies, and no cross-site tracking cookies of any kind. Everything above is set by the site itself, stays in your browser, and exists only to remember a preference you chose.
Because the site is served through Cloudflare, Cloudflare sets a security cookie (__cf_bm) to distinguish human visitors from bots. It is used only to protect the site from abuse and is not used to track you across the web.
Almost none. Every script, stylesheet, font and image a normal MunchStats page needs is served from munchstats.com itself. The JavaScript libraries the site uses (jQuery, Chart.js, Font Awesome) used to load from public CDNs, and the header buttons used to load code from Ko-fi and Twitter; all of that is now hosted here, so browsing the site sends your IP address to nobody but us.
Exactly two exceptions remain, and neither happens on an ordinary page view:
Links to other sites (Smogon, Limitless, RK9, Ko-fi, Twitter and so on) are ordinary links. Nothing is requested from those companies unless you click through, at which point their own privacy policies apply.
MunchStats carries no advertising and no affiliate links. It previously showed eBay merchandise listings; those were removed in September 2026 along with the analytics, so no commercial third party is involved in a page you load. The site is funded by occasional donations and by the person who runs it.
The app collects no personal data. It contains no analytics SDK, no crash-reporting SDK, no advertising SDK, and no tracking of any kind. It does not ask for your location, contacts, camera, files, or any other sensitive permission.
The only permission it needs is network access, used solely to download Pokémon statistics from munchstats.com. Those statistics are stored on your device so the app keeps working offline. That cached data stays on your phone, is never transmitted anywhere, and is deleted when you clear the app data or uninstall the app.
Our servers see the same thing any web server sees when the app requests data — an IP address and which statistics were asked for. We do not link those requests to an identity, because the app never sends one.
Test versions given to testers are the same app and collect nothing either. Testers send feedback through the contact form, which is covered above.
MunchStats displays competitive results — player names, placements, and team lists — gathered from publicly published sources: Pokémon Showdown usage statistics and public replays, Limitless, RK9.gg, the community-run VGCPastes spreadsheet, and Pokepaste. We publish only information those sources already make public, and we do not add anything to it.
If you are a player and want your name or team removed from the site, contact us and we will take it down.
Depending on where you live — for example under the GDPR in the EU/UK, or the CCPA in California — you may have the right to request access to the personal data we hold about you, to have it corrected or deleted, to object to how we process it, or to receive a copy of it.
In practice we hold very little: unless you have emailed us, used the contact form or applied to test the app, we almost certainly hold nothing that identifies you. Where we do process data, the legal basis is our legitimate interest in keeping the site running, secure, and useful. Email us to exercise any of these rights and we will respond as quickly as we reasonably can. We do not sell personal information, and we never have.
MunchStats is a competitive statistics tool intended for a general audience aged 13 and over. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information through the contact form or the app tester application, email us and we will delete it.
The site is served over HTTPS. Because there are no accounts, there are no passwords to steal and no stored profile to breach.
If this policy changes we will update the date at the top of the page. Significant changes will also be noted on the About page.