Privacy Policy

Last updated: July 2026

This policy explains what Pal Breed Tools collects when you visit, who else receives anything, how long it is kept, and what you can ask us to do about it. It covers the site as it works today, and it sets out in advance what would change if features such as analytics, advertising, accounts or a newsletter are added later.

1. Who this policy is from

Pal Breed Tools is an independently run, fan-made website. In data protection terms the operator of the site is the controller of the information described here. Contact details are in section 18.

This policy applies to palbreedtools.com and every page on it. It does not apply to other sites you reach by following a link from here.

2. The short version

There are no accounts, no sign up, no contact forms and no payments. As the site stands today it sets no cookies, runs no analytics, and stores nothing in your browser. Nothing you do in the breeding tools is sent to us or recorded anywhere. We do not sell, rent or share personal information, and we never have.

Two things do happen automatically: our hosting provider keeps standard server logs, and your browser fetches fonts from Google. Both are explained below.

3. What we collect

Information you choose to give us

The only way to send us anything is by email. If you write to us, we receive your email address, your name if your mail program sends one, and whatever you put in the message. We use it to reply and, where you are reporting a mistake in the breeding data, to investigate and correct it.

Information collected automatically

Serving a web page requires your browser to connect to a server, and that connection is logged. Our hosting and content delivery provider records the usual technical details for each request:

IP address
Date and time of the request
The page or file requested
Browser type and version, and operating system
Referring page, where your browser sends one
Approximate location worked out from the IP address, usually no finer than city level

These logs exist for security, abuse prevention and keeping the site online. We do not use them to build a profile of you, and we do not try to identify individuals from them.

What we do not collect

Names, addresses, phone numbers or dates of birth
Payment or financial details of any kind
Passwords or account credentials, since there are no accounts
Any of the categories treated as sensitive under data protection law, including racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, sex life or sexual orientation
Precise GPS location
Anything you select or search for inside the breeding tools

4. Cookies and browser storage

The site sets no cookies of its own, and uses no local storage, session storage or similar technology. There is no cookie banner because there is nothing to consent to.

Choices you make in the tools, such as the Pals you have ticked, are held in the page while you use it and in the address bar so that a link can be shared. They are discarded when you close the tab, and they are never transmitted to us.

Our hosting provider may set a strictly necessary cookie for security and bot detection. A cookie of that kind keeps the service running and cannot be used to advertise to you.

5. Third parties that receive data

Data protection law requires us to tell you who else receives information, by name or by category. We describe our providers by category and function.

Hosting and content delivery

The site is served through a third-party hosting and content delivery provider. Every request necessarily passes through it, and it keeps the security logs described in section 3. It acts as a processor on our behalf and is not permitted to use the data for its own purposes.

Google Fonts

Typefaces are loaded from Google Fonts. Your browser makes a direct connection to Google's servers to fetch them, and Google receives your IP address and browser details as a result. We do not control that connection and we receive nothing back from it. Google's handling of the data is governed by its own privacy policy at policies.google.com/privacy.

If you would rather not make that connection, a browser extension that blocks third-party font requests will stop it, and the site stays fully usable with a fallback typeface.

Email

Mail you send us is handled by our email provider and stored in that mailbox. It is not added to any list and is not used for anything other than replying to you.

6. Why we process this information

To deliver the pages and files you request
To keep the site available, secure and free from abuse
To reply to messages you send us
To find and fix errors, including mistakes in the breeding data
To comply with the law where we are required to

None of it is used for automated decision-making or profiling that produces legal or similarly significant effects.

7. Legal bases

Where the UK or EU GDPR applies, server logs and font delivery rest on our legitimate interests in running a secure and functioning website, balanced against your interests and limited to what is technically necessary. Replying to your email rests on our legitimate interest in answering people who contact us, and on taking steps at your request. Anything that requires consent, such as analytics or advertising cookies, would be introduced only with consent obtained first.

Where other data protection laws apply to you, we process the limited data described here on the equivalent grounds those laws recognise, and on consent wherever consent is required.

8. How long we keep things

Server logs: kept by our provider for a short period, typically no more than 30 days, then deleted or reduced to statistics that cannot identify anyone.
Email correspondence: kept while the matter is open and for up to 24 months afterwards, so there is a record of reported errors and their fixes. Removed sooner on request.
Everything else: not retained, because it is not collected.

9. Sharing and disclosure

We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not trade, rent or barter it, and we receive no money or other value in exchange for it.

Information goes only to the service providers described in section 5, who act on our instructions, and to authorities where we are legally obliged to disclose it, for example in response to a valid court order. If the site were ever transferred to a new operator, the limited data described here would transfer with it, and this policy would continue to apply until the new operator published its own.

10. International transfers

The site is served from a global content delivery network, so the server that answers you is usually the one nearest you. Because of that, and because our providers operate internationally, data may be processed in countries other than your own, including outside the United Kingdom and the European Economic Area.

Where such transfers involve personal data protected by the UK or EU GDPR, they are covered by the safeguards our providers have in place, such as Standard Contractual Clauses approved by the European Commission.

11. Security

The site is served over HTTPS, so traffic between your browser and the server is encrypted. It is built as static files with no database and no user accounts, which means there is no store of personal information to breach. Email is protected by the access controls of our email provider.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach ever occurs that affects personal data, we will notify the relevant authority and the people affected as the law requires.

12. Your rights

Which rights you have depends on where you live. In practice we hold almost nothing about anyone, so most requests are answered by confirming exactly that. Write to us at the address in section 18 and we will respond within the period the law allows, normally 30 days. There is no charge, and we will not treat you differently for asking.

Wherever you are

Whatever your local law says, we will honour these requests from anyone who asks:

A summary of what we hold about you and what we do with it
Correction of anything inaccurate or incomplete
Deletion of what we hold, unless we are legally required to keep it
A copy of anything you sent us, in a readable form
An objection to how we are processing something
Withdrawal of any consent you have given

If you are in the UK or the European Economic Area

Under the UK and EU GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing carried out on the basis of legitimate interests. Where processing rests on consent you may withdraw it at any time, and withdrawing is as easy as giving it. You may also complain to your national supervisory authority, which in the United Kingdom is the Information Commissioner's Office.

If you are in California

Under the CCPA as amended by the CPRA you have the right to know what personal information is collected, used, disclosed or sold, the right to delete it, the right to correct it, the right to opt out of sale or sharing, and the right to limit the use of sensitive personal information. We do not sell or share personal information and we do not collect sensitive personal information, so there is no "Do Not Sell or Share My Personal Information" link to provide. We will not discriminate against you for exercising any of these rights.

Everywhere else

Many countries have their own data protection laws granting rights along these lines, including rights to access, correction, erasure and grievance redressal. If your local law gives you a right not listed here, write to us and we will honour it where it applies.

13. Children

Palworld is played by people of many ages, and this site is a reference tool rather than a service aimed at children. It is not directed at children under 13, and we do not knowingly collect personal information from them. Because there are no accounts and no forms, there is no route by which a child could submit personal information other than by sending an email.

Several data protection laws require verifiable parental consent before a child's personal data is processed, and prohibit tracking, behavioural monitoring and targeted advertising aimed at children. We do none of those things, and we do not intend to. If you believe a child has sent us personal information, write to us and we will delete it.

14. Do Not Track and Global Privacy Control

Some browsers send a Do Not Track or Global Privacy Control signal. Since we do not track visitors across sites and do not sell or share personal information, there is nothing for these signals to switch off. If tracking is ever introduced, Global Privacy Control signals will be honoured.

15. Features that do not exist yet

The site may grow. This section sets out in advance how each addition would be handled, so the commitment exists from the start rather than being written after the fact. In every case this policy will be updated, and the date at the top changed, before the feature goes live rather than afterwards.

Analytics

We may add analytics to understand which pages are useful. If it is a cookieless service that reports only aggregate figures, it will run without a consent banner because it collects no personal data. If instead a service such as Google Analytics is used, which sets cookies and processes an identifier for your device, it will load only after consent where consent is required, and there will be a way to refuse it and to withdraw that consent later.

Advertising

We may add advertising to cover running costs. Ad networks commonly set cookies or similar identifiers, may build interest profiles, and may pass data to their own partners. If advertising is added, this policy will describe the networks involved and what they collect; personalised advertising will be shown only with consent where the law requires it; there will be a way to refuse personalised ads and receive non-personalised ones instead; and advertising will not be targeted at children. Links to the relevant industry opt-out tools will be listed here at that time.

Accounts, comments or submitted content

We may add a way to comment on guides or to submit corrections directly. If we do, this policy will set out exactly what is stored, which would typically be a display name, an email address, the content submitted, and the IP address it came from for moderation and spam prevention. Submitted content is public by nature, so anything you post can be read by others. You would be able to ask for your content and your account to be deleted.

We may offer an email newsletter. It would be strictly opt in, never added to on your behalf, and every message would carry an unsubscribe link that works. Your address would be used only to send what you signed up for, and would be deleted when you unsubscribe.

16. Links to other sites

Pages here link to other websites, including the official Palworld site and community resources. We do not control those sites and are not responsible for their content or their privacy practices. Read their policies before giving them information.

17. Changes to this policy

This policy may be updated to reflect changes to the site or to the law. The date at the top always shows when it last changed. Material changes, such as introducing analytics, advertising or any new collection of personal data, will be made before the change takes effect rather than after. Continuing to use the site after an update means the current version applies to you.

18. Contact and grievances

For any privacy question, to exercise a right described in section 12, or to raise a grievance, email [email protected] with "Privacy" in the subject line. This address is our single point of contact for privacy matters, including formal grievances and requests to exercise any right described above.

We aim to reply within a few days, and in any case within the period required by the law that applies to you. If our response does not satisfy you, you have the right to complain to the data protection authority for the country you live in.

Pal Breed Tools is fan-made and is not affiliated with, endorsed by or sponsored by Pocket Pair, Inc. Game names and imagery belong to their respective owners.