PRIVACY
Last updated October 11, 2026
Build-a-Mon is a free, non-commercial fan game made for fun. It has no ads, sells nothing, and does not track you. This page says in plain words what the site keeps and what it does not.
THE SHORT VERSION
- You can play everything as a guest. Nothing about you is collected to do that.
- A trainer account is optional. It keeps a trainer name you pick and your game results.
- The site never stores your email address, password, real name or picture.
- No ads, no analytics trackers, no cookies, and nothing is sold or shared for marketing.
PLAYING AS A GUEST
Your builds, paused journeys, Pokédex, trophies and settings are saved in your own browser (its local storage), on your device. They are not sent anywhere. Clearing your browser data removes them.
The site keeps an anonymous daily count of how many builds and runs are started and finished. The count has nothing in it about who played.
IF YOU MAKE A TRAINER ACCOUNT
You can sign in with a link sent to your email, or with Google, Discord or X. There is no password.
- Email link: your address is used once to send the link, through an email service called Resend. The site does not keep the address. It keeps only a scrambled fingerprint of it, which cannot be turned back into your address, so it can recognise you next time. There is no mailing list and no way for the site to email you later.
- Google: the site asks Google only to confirm who you are and keeps only your Google account number. It does not ask for your email address, name or picture.
- Discord: the site receives your Discord account number and username. It keeps only the account number. The username is offered once as a suggestion for your trainer name and is not stored unless you choose it.
- X: the site receives your X account number and username. It keeps only the account number. The username is offered once as a suggestion for your trainer name and is not stored unless you choose it. Nothing is posted or read on your account.
Once you are signed in, the site stores:
- the trainer name you pick, which is public;
- your game results: builds, runs, stats, and the progress that fills your Pokédex and trophy case;
- your paused journeys, so they follow you to another phone or computer;
- a sign-in code kept in your browser so you stay signed in. The site keeps only a scrambled copy of it, for up to a year, and it is deleted when you sign out.
Your trainer name, top builds, runs and stats appear on your trainer page and on the leaderboards, where anyone can see them. So does a build you put in the Arena, with its rating and its wins and losses, until you take it out. When a trainer beats the Champion or takes first place, the game's Discord server announces it with the trainer name and the creation's name.
THE DISCORD SERVER
Joining the Build-a-Mon Discord server is optional and happens on Discord, under Discord's own privacy policy. The game's bot does not read or store your messages. It answers commands and posts game news.
If you connect your Discord account to your trainer (by signing in to the game with Discord, or with the /link command), the site keeps your Discord account number next to your trainer so the bot can give you the Trainer and Champion roles. The /unlink command removes the connection and the roles. If you sign in to the game with Discord, the connection is made again the next time you sign in.
THINGS THAT HAPPEN BEHIND THE SCENES
- Abuse limits: to stop spam, the site briefly counts requests by internet address (IP). These counters delete themselves within a day and are not linked to your trainer.
- Fusion pictures: the picture of your creation is drawn by an image service from OpenAI, using the Pokémon you picked. Nothing about you is sent. Finished pictures are saved so they do not have to be drawn twice.
- Sprites, fonts and animation: your browser loads Pokémon sprites from the PokeAPI sprite collection on GitHub, fonts from Google Fonts, and an animation library from Cloudflare's cdnjs. Like any website you visit, those services can see your internet address when your browser asks them for a file.
WHO HELPS RUN THE SITE
These companies process data only to make the site work: Vercel (hosting and stored fusion pictures), Upstash (the database), Resend (sending sign-in emails) and OpenAI (drawing fusion pictures). If you choose to sign in with Google, Discord or X, that company handles the sign-in on its own pages under its own privacy policy.
Nothing is sold, rented, or shared for advertising. Ever.
CHILDREN
You do not need an account to play. If you are under 13, please ask a parent or guardian before making a trainer account, or just play as a guest. The site does not knowingly collect personal information from children. A parent or guardian can ask for a child's trainer to be removed using the contact below.
SEEING OR DELETING YOUR DATA
Signing out deletes your sign-in code. To have your trainer and everything stored with it deleted, or to ask what is stored, email buildamonsupport@gmail.com and include your trainer name. Requests are handled by hand, usually within 30 days. Data saved in your own browser is yours to clear at any time from your browser settings.
CHANGES
If this page changes, the date at the top changes with it.