Privacy

What this site knows about you, and what it does with what it reads out of the game. Both answers are short.

What this site knows about you

There are no accounts here. Nothing asks for a name, an email or a password, and there is nothing to log in to, so there is no profile of you to keep.

Analytics, and only if you agree. If you accept the banner, Google Analytics counts which pages get opened and roughly where in the world from, and sets its own cookies to tell one visit from the next. Until you accept, none of it is stored — the tag is loaded with storage switched off, so a page view is counted without anything being written to your device. Decline and it stays that way. Either answer can be changed whenever you like from the analytics choice in the footer.

Three things are kept on your device either way, none of which travels anywhere: whether you chose the dark or the light theme, whether you have dismissed the release banner, and your answer about analytics itself. They are how the site remembers what you asked it to do. Clearing your browser's site data for metaroll.app removes all three, and the site will ask again.

The suggestion box keeps the message and nothing else. What is stored is the text you typed and the time it arrived. Not your address, not your browser, not a way to reach you — which also means a suggestion cannot be replied to, and that is the trade. Do not put anything in it you would not want read by a stranger. There is no automatic deletion: a suggestion stays until it is deleted by hand.

Two companies are in the way of this page reaching you. Cloudflare sits in front of the site and every request passes through it, which means it sees the address you are asking from — that happens whatever you answered about analytics, because it is how the page is delivered at all. Google receives the analytics, and only if you agreed to it; the readings are kept for two months and are processed in the United States under the EU-US Data Privacy Framework. Both they and the server behind them keep ordinary access logs, the way web infrastructure does.

The links out of here — to Ko-fi, to X, to the projects credited in the footer — are ordinary links. Nothing is shared with any of them until you click, and then you are on their site under their rules.

The trainers on the ladder

The ladder page shows the top 1000 players: name, rating, win-loss record, country, language and in-game avatar. That is not something this site went looking for. It is what the game's own ranked ladder publishes to every player who opens it — this site reads that screen every hour and shows it on the web.

And that is all it does with it. It is not joined to anything else, not enriched from any other source, not used to work out who anyone is off the ladder, and not sold or handed to anyone. It is republished as it was read, and it is free for anyone else to read too. When a name leaves the ladder it leaves here at the next capture; nothing keeps a private history of players who have dropped out.

Nobody is asked to consent to this, and the honest reason is that it would be unworkable to ask a thousand people who never came here. It is done on the ground of legitimate interest: the standing is already public in the game, showing it changes nothing about who can see it, and there is a public interest in the ladder being readable outside the client. That is a judgement, not a licence — if you are on it and would rather not be, say so and the row goes. That is a right, not a favour, and you do not have to give a reason.

The rest of the data

Everything else on the site — which Pokémon are being used, with which moves, items, abilities and spreads — is counted off the same public ladder screens. It is aggregate from the start: it says how often a Pokémon is used and with what, never by whom. Nothing in it points back at a player.

It is read hourly, shown, and published as a free JSON API. It is not modelled, guessed at or filled in — where a reading is missing, the page says so rather than inventing one.

Who runs this

One person — xmarston, reachable at hello@metaroll.app — on a Raspberry Pi at home. No company behind it, no advertising on it, nothing sold, and nobody paying for any of what is described above. The two services named further up are the only ones any of this touches, and one of them waits for your permission.

What you can ask for

Whatever is held about you, you can ask to see, to have corrected, or to have deleted, and you can object to it being held at all. In practice, on this site, that is a short list: a row on the ladder, a suggestion you sent, or analytics you agreed to and have changed your mind about. Write to hello@metaroll.app and it gets done — @MetaRollApp reaches me too, though email is better for anything you would rather not say in public.

And if I do not do it, or do it badly, you can complain to the Spanish data protection authority, the AEPD. Saying so is part of what this page is for.

Last updated 22 August 2026.