Legal
In force since 14 September 2026. Written to be read, not to be skipped.
The English text is the version that governs; the Spanish one is a translation of it.
Terms of use
What you can expect from the game, and what the game expects from you.
Playing means accepting this
PokeVillain is a free, non-commercial fan project run by one person. Playing it — as a guest or with an account — means you accept what is written here.
If you do not agree with something on this page, the honest answer is not to play. There is nothing to cancel and nothing to pay.
Age
You must be at least 14 to create an account. That is the age at which you can consent to your own data being handled where this game is run from.
No date of birth is asked for, and none is stored. That is deliberate — the less that is collected, the less there is to lose.
Your account is yours to keep safe
An account is a codename and a passphrase. There is no email, so there is no password reset link and no automated recovery: if you lose the passphrase, the account is very likely gone. Write it down somewhere.
Do not share an account, and do not use someone else's. Anything done from your account is treated as done by you.
What you post is seen by other people
The market, the board, messages and the names you give your Pokémon carry text other players read. Keep it to the game. The following will get content removed and, repeated, the account with it:
- Harassment, threats, or abuse aimed at another player.
- Hate speech, or content degrading people for who they are.
- Sexual content, and absolutely anything sexualising minors.
- Real personal information about anybody, yours or someone else's.
- Advertising, spam, scams, or trading in-game things for real money.
- Pretending to be staff, or pretending a message comes from the game itself.
Bugs, exploits and automation
If you find something that gives you an unfair advantage, report it. You will not be punished for reporting it — that is a promise, not a formality. Quietly using it, or handing it around, is what gets an account removed.
Scripting or automating play, and running extra accounts to feed a main one, are not allowed. Progress obtained that way can be reversed.
Moderation
Content can be edited or removed, and accounts can be suspended or deleted, when this page is broken. Serious cases are acted on immediately and explained afterwards rather than the other way round.
If you think a decision was wrong, say so — there is one person behind them and they can be mistaken.
The game is provided as it is
This is a hobby project in active development. It can go down, change, lose a feature you liked, or behave in ways nobody intended. There is no uptime promise and no support desk.
There is no wipe planned, but no guarantee against one either. If a data problem ever forces one, it is announced before it happens, not after.
Leaving
You can stop whenever you like. To have an account and its data deleted, ask through the Discord server. A guest save needs no request — it clears itself, see below.
Changes to this page
This page can change as the game grows. Meaningful changes are announced on the Discord, and the date at the top always says which version you are reading.
Privacy
What the game stores, why, for how long, and what it deliberately never asks you for.
What is stored
The whole list. There is not a longer one somewhere else:
- Your codename — the one you choose. It is public: it appears on the leaderboard and on your profile.
- Your passphrase, only ever as a salted scrypt hash. It is never stored in a form anybody can read, including me.
- Your game state: your Pokémon, items, money, badges, where you are, what you have done.
- What you publish: market listings, board posts, and messages you send to other players.
- A session record, so the site knows it is still you between pages. It holds a hash of your session token, not the token.
What is never asked for
No email address. No real name. No date of birth. No phone number. No payment details — there is nothing to pay for.
There is no advertising, no analytics, no tracking pixels, and no third-party scripts of any kind. The game sends no data about you to anyone.
Cookies
One cookie: the one that keeps you signed in. It is strictly necessary for the game to work at all, which is why there is no cookie banner asking you to accept it — there is nothing optional to accept.
No advertising or tracking cookies are set, by this site or by anybody else.
IP addresses
Your IP address is read while a request is being handled, to limit how fast anyone can hammer the sign-up and login forms. It is not written to the game database.
The hosting provider keeps ordinary web server logs, which include IP addresses, for a limited period. That is standard for any website you visit.
How long things are kept
A guest save with no Pokémon is cleared after 24 hours. A guest save with a roster is kept through 30 days of inactivity, counted from your last action, and then cleared.
A sign-in lasts 30 days before you have to sign in again.
An account is kept for as long as you want it. Ask and it goes.
Your rights over your data
You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Ask through the Discord server and it will be dealt with.
Deleting an account removes it and its game state. Things you posted publicly may survive in other players' inboxes or in board threads other people replied to, in the same way a sent letter is not unsent by moving house.
Other services
The community runs on Discord, which is a separate company with its own terms and its own privacy policy. Nothing links your Discord identity to your game account unless you say so yourself in a message.
The site runs on rented hosting. The host can technically reach the server, as any host can.
Fan project
Who this is by, what it is not, and what happens to what you make in it.
Not official, and not pretending to be
PokeVillain is a fan project. Not affiliated with, endorsed by or associated with Nintendo, Game Freak or The Pokémon Company. Pokémon and all related names are trademarks of their respective owners.
Nothing is sold here
There is no shop, no premium currency, no subscription, no advertising and no donations. The game makes no money and is not trying to.
To the rights holders
This is made out of affection for the source material and with no intent to compete with it. If a rights holder wants it taken down, get in touch through the Discord server and it will be, without argument.
What you write stays yours
Text you post keeps belonging to you. By posting it you allow the game to display it to other players, which is the entire point of posting it, and nothing else.
Music credits
The site loops are free works by independent musicians, each used under the license its line names.
- «Bittersweet Story» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «Fountain of the Fairies» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «Airship» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «Town» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «Pavane» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «In the Royal Court» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «Title Screen» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «Dungeon» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «The Shrine of Mysteries» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «Castle on the Mountain» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «The Evil One» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes
- «Battle 1» — Aureolus_Omicron (CC0). https://opengameart.org/content/15-melodic-rpg-chiptunes