Privacy Policy

Last updated October 2, 2026

The short version: DexHaul has no accounts and sets no tracking cookies. We don't sell your data or use advertising trackers. Your saved items live only in your own browser. The main data we handle is the search terms and filters you choose, which we pass to Shopify's catalog to fetch results.

Who we are

DexHaul ("DexHaul", "we", "us") is a free, independent, unofficial search engine for Pokémon products. It searches Shopify's Universal Commerce Protocol (UCP) global catalog and links out to the independent shops that list products for sale. We are not a store and take no payments. Pokémon and Pokémon character names are trademarks of their respective owners; DexHaul is not affiliated with, endorsed by, or sponsored by Nintendo, Game Freak, Creatures Inc., or The Pokémon Company.

Information we do not collect

• No user accounts, names, passwords, addresses, or phone numbers.
• No payment or financial information (we never handle checkout).
• No advertising or cross-site tracking cookies, and no third-party analytics scripts.
• We do not sell, rent, or trade any information about you.

Information we process

• Search terms and filters. When you search or filter, the words, category, price range, currency, and language you choose are sent to Shopify's UCP catalog to return matching products. Search results are not stored on our server: every search is fetched live from Shopify.
• IP address. Like any website, our server receives your IP address with each request. We use it transiently, in memory, to enforce rate limits that prevent abuse, and it may appear in short-lived server operational logs. We do not use it to build a profile of you, and we do not sell it.
• Saved items (your wishlist). When you tap the heart on an item, that product's ID and the time you saved it are stored only in your browser's local storage, on your own device (no titles or prices). When you open your saved items, those IDs are sent to DexHaul and on to Shopify's catalog to show current prices and availability; we do not keep them beyond short-lived operational logs. Clearing your browser's site data for DexHaul removes your saved items.
• Anonymous page-event counts. The site sends DexHaul simple counts of how pages are used, for example that a section came into view, a search started, or a result link was clicked, along with your language, currency, a device-size class, page-speed measurements, coarse visit buckets worked out in your browser from the dh:visits key (whether this is a first visit, roughly how long since your last one, and a rough count of the days you have visited), and, when the homepage's "Pick up where you left off" panel is shown, whether you have recent searches and a rough count of saved items (never the searches or items themselves). They go to our own server (at /api/evt) with no cookies and no identifier that lasts beyond a single page view; we do not store your IP address or browser user agent with them, and they are never shared with third parties or used for advertising. Event counts never include your search text.
• Searches. The words you search for are sent to DexHaul and on to Shopify's catalog to find results. When you come back to the homepage after searching, it runs your most recent search again to show live results for it. Search terms and the product IDs of saved items you open appear in short-lived server operational logs used to keep the service running.
• Preferences. Your chosen currency and language are stored in your browser's local storage so the site remembers them; they are sent with searches only to localize results.

Third-party services

Using DexHaul necessarily involves a few third parties, each governed by its own privacy policy:

• Shopify (UCP catalog). Your search terms and localization preferences are sent to Shopify to retrieve catalog results.
• Google Fonts. The page loads typefaces from Google's font servers (fonts.gstatic.com), which may receive your IP address as a normal part of serving those files.
• Merchant sites and image CDNs. Product images are loaded from the merchants' and Shopify's content delivery networks. When you click through to a listing, you leave DexHaul for an independent merchant's website, which handles your data under its own policy.

Cookies and local storage

DexHaul sets no cookies. We use your browser's local storage, on your own device, for these keys only:

• dh:lang and dh:cur: your chosen language and currency.
• dh:recents:v1: your recent search text, so you can repeat a search.
• dexhaul:wishlist:v2: your saved product IDs and the time you saved each one. No prices, titles, or images are kept.
• dh:visits: the dates of your first and latest visit and a count of the days you have visited, used only to tell new visits from returning ones.
• dh:locnote: remembers that you dismissed the note about the currency shown.
• dh:fonts: remembers that your browser already has the site's fonts, so later pages show them straight away.

Local storage stays on your device, with these exceptions: your currency and language travel with searches to localize results; saved product IDs are sent when you open your saved items; your most recent search is run again when you return to the homepage; and the page-event counts described above carry your language and currency, coarse visit buckets derived from dh:visits, and yes/no or rough-count signals about recent searches and saved items.

Data retention

Rate-limit records are held only for a short rolling window and then discarded. Search results are not stored. Page-event counts are kept as daily totals in server memory and in short-lived operational logs, with no IP address or user agent attached. We do not maintain long-term records tied to individual visitors.

Children's privacy

DexHaul is a general-audience search tool and is not directed to children under 13. We do not knowingly collect personal information from anyone, including children.

Your choices

You can clear your saved items, recent searches, and preferences at any time by clearing DexHaul's site data in your browser. Because we don't maintain accounts or profiles, there is no account to delete.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about privacy? Contact the site operator at the address published on the About section of the homepage.