Privacy Policy

Who runs this site

Pal Hatchery is an independent, fan-made Palworld tool run by one person. It is not affiliated with, endorsed by, or connected to Pocketpair, Inc.

For anything in this policy — questions, requests, complaints — write to hello@palhatchery.com. That address is read by a human and is the right place for every kind of request described below.

What stays on your device

Nearly everything. The app is a static site: the code runs in your browser, and the data it works on never leaves it unless you deliberately ask it to.

• Your pals. Species, nicknames, genders, levels, passives and IVs are stored in your browser's IndexedDB (with localStorage as a fallback).
• Your save file. When you sync a Level.sav, it is decompressed and parsed by JavaScript running on your own computer. The file is never uploaded. On Chrome and Edge the browser may remember which file you picked so you need not choose it again; that handle also stays on your device.
• Your settings. Theme choice, map pins, markers you have ticked as found, and waypoints imported from your save.

Because this is browser storage, clearing your site data deletes it. There is no copy on our side to restore from unless you have made a backup code — see below.

What can reach the server, and only if you ask

Some optional features need a server. Each one is something you actively trigger; none of them run in the background, and the app works fully without them.

• Transfer codes and backup codes. Your collection is encrypted in your browser before it is sent. Half of the code is the decryption key and is never transmitted, so what is stored is a blob the server has no way to open. Transfer codes are single-use and expire after 15 minutes; backup codes last 30 days and can be refreshed. Delete one at any time by asking us, or simply let it expire.
• Shared links. If you share a breeding route, a pal or your box, the content of that share is stored so the link works for whoever you send it to. Shares are unlisted — reachable only by the link — and expire. They contain what you chose to share and nothing else. Ask us and we will delete one immediately.
• Community figures. If you opt in, the app may record that a species was looked up, so the site can show which pals people are chasing. This is a counter against a species name. It carries no identifier of any kind and cannot be traced back to you or your collection.
• Save-parser reports. If the save reader fails on your file and you choose to report it, the app sends the technical shape of the failure — file offsets, format markers, an error message. It does not send your save or its contents.

Server logs

Like every website, the web host records ordinary access logs: IP address, the page requested, the time, your browser's user-agent string. These are generated by the hosting provider, kept briefly for security and troubleshooting, and are not used to build any profile of you.

Advertising

This site is free and carries adverts through Google AdSense. That is the one place third-party cookies and similar technologies come into play.

• Google and its partners may use cookies or device identifiers to serve and measure ads, including ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You can opt out of personalised advertising at Google Ads Settings, or opt out of third-party vendors' use of cookies at aboutads.info/choices and youronlinechoices.com.
• How Google handles data from sites that use its services is described at policies.google.com/technologies/partner-sites.

If you are in the UK or the EEA, a consent message from Google's certified consent platform appears before any personalised advert is served, and you can change or withdraw that choice at any time through the same message.

Ads are never allowed inside a breeding plan, a dialog or the trait picker — only at natural breaks in the page.

Your rights

Under the UK GDPR and the EU GDPR you have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to it.

In practice most of those rights are already in your hands here, because the data is on your device: Export gives you the file, and Erase in the header wipes everything this site has stored in that browser. For anything held server-side — a backup code, a transfer code, a share link — email hello@palhatchery.com with the code or link and it will be deleted. We aim to answer within 30 days.

If you believe your data has been handled improperly you may complain to your national data protection authority; in the UK that is the Information Commissioner's Office.

Children

This site is not directed at children under 13, and does not knowingly collect personal information from them. If you believe a child has provided personal information here, email us and it will be removed.

Changes

If this policy changes, the date at the top of the page changes with it. Material changes will be noted on the site itself.