Privacy Policy.

Who runs this site

One person. Pal Hatchery is an independent, fan-made Palworld tool, and it is not affiliated with, endorsed by, or connected to Pocketpair, Inc.

Everything in this policy goes to hello@palhatchery.com. A human reads that address. Questions, requests and complaints all belong there.

What stays on your device

Nearly everything. The app is a static site, so the code runs in your browser and the data it works on stays there unless you deliberately send it somewhere.

• Your pals. Species, nicknames, genders, levels, passives and IVs are stored in your browser's IndexedDB, with localStorage as a fallback.
• Your save file. When you sync a Level.sav, your own computer decompresses and parses it in JavaScript. The file is never uploaded. Chrome and Edge may remember which file you picked so you don't have to choose it again, and that handle stays on your device too.
• Your settings. Theme choice, map pins, markers you have ticked as found, and waypoints imported from your save.

This is browser storage, so clearing your site data deletes it. There is no copy on our side to restore from unless you made a backup code. Those are covered next.

What can reach the server, and only if you ask

A few features need a server. You trigger every one of them by hand, none of them run in the background, and the app works fully without them.

• Transfer codes and backup codes. Your collection is encrypted in your browser before anything is sent. The second half of the code never leaves your device, and the encryption key is built from it, so what the server holds is a blob it has no way to open. Transfer codes work once and expire after 15 minutes. Backup codes last 30 days, and you can refresh or delete one from the app whenever you like.
• Shared links. If you share a breeding route, a pal or your box, the contents of that share are stored so the link works for whoever you send it to. Shares are unlisted, reachable only by the link, and they expire after 180 days. Nicknames go in only if you tick the box for them. Ask us and we will delete one immediately.
• Corrections you send in. If you fill in a missing learnset or spawn location, or flag something as wrong, what you typed is stored so it can be checked by hand before it ships in a data update. Treat the note box as public and keep personal details out of it.
• Community figures. Off until you switch it on in Help. With it on, choosing a breeding target sends counters for the species you picked, the passives you ticked, and how full your paldex is rounded to the nearest ten percent. Nothing identifying travels with them, and there is no way to tie two counters together.
• Save-parser reports. If the save reader fails on your file and you choose to report it, the app sends the shape of the failure: the stage it broke at, format markers, a byte offset, the file size. It does not send your save or anything in it.

Server logs

The web host keeps ordinary access logs, the way every website does. That is your IP address, the page you asked for, the time, and your browser's user-agent string. The hosting provider generates them, not us. They are kept briefly for security and troubleshooting, and they are not used to build any profile of you.

Advertising

This site is free. It carries ads through Google AdSense, and that is the one place third-party cookies and similar technologies come into play.

• Google and its partners may use cookies or device identifiers to serve and measure ads, including ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You can turn off personalized advertising at Google Ads Settings, or opt out of third-party vendors' use of cookies at aboutads.info/choices and youronlinechoices.com.
• What Google does with data from sites that use its services is set out at policies.google.com/technologies/partner-sites.

In the UK and the EEA, a consent message from Google's certified consent platform appears before any personalized ad is served. That message is Google's, not ours. You can change or withdraw your choice at any time through it.

Ads are never allowed inside a breeding plan, a dialog or the trait picker. They sit at natural breaks instead.

Your rights

Under the UK GDPR and the EU GDPR you have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to it.

Most of those rights are already in your hands here, because the data is on your device. Export hands you the file, and Erase in the header wipes everything this site has stored in that browser. Anything held on the server goes on request. Email hello@palhatchery.com with the backup code, transfer code or share link and it will be deleted. We aim to answer within 30 days.

If you believe your data has been handled improperly you may complain to your national data protection authority. In the UK that is the Information Commissioner's Office.

Children

This site is not directed at children under 13, and does not knowingly collect personal information from them. If you believe a child has provided personal information here, email us and it will be removed.

Changes

If this policy changes, the date at the top of the page changes with it. Material changes will be noted on the site itself.