PokeIsaac is a fan-made game: a dungeon roguelike paying tribute to The Binding of Isaac and the world of Pokémon, played in the browser. It is a hobby project created by SrBatai.
It is free and non-profit. There are no ads, real-money purchases, subscriptions, donations or sponsorships, and no money is accepted in any way. Tokens, tickets, medals and every other in-game currency are earned by playing and have no value outside the game.
It is not distributed on app stores: it is only played on its website.
The Binding of Isaac is a work by Edmund McMillen and Nicalis, Inc. PokeIsaac is only inspired by its game mechanics; it does not use its names, texts, graphics or sounds, and it has no relationship with its creators.
The project claims no rights over that material and uses it only as a non-commercial fan tribute. All other trademarks belong to their respective owners.
3Third-party assets and licenses
Asset
Source and license
Pokémon sprites and portraits
PMDCollab / SpriteCollab, under the CC BY-NC 4.0 license (non-commercial use, with attribution). The original Mystery Dungeon art is by Spike Chunsoft. The artists of each Pokémon are listed on the in-game Credits screen.
Item icons and Pokémon data
PokéSprite (msikma) and PokeAPI: sprites and data from the Pokémon games, for non-commercial use.
Cries, footprints and item icons
Collected by Centro Pokémon from the Pokémon games, for non-commercial use. They are the property of Nintendo / Creatures / GAME FREAK / The Pokémon Company.
Trainers in the Trainer Room
Overworld sprites from Pokémon Emerald, taken from the public decompilation pret/pokeemerald, for non-commercial use. They are the property of Nintendo / Creatures / GAME FREAK / The Pokémon Company.
Music
Blake Speers, "Last Starlight: Paradise Dream" (OpenGameArt.org), under the CC BY 4.0 license, and Aureolus_Omicron, "15 Melodic RPG Chiptunes" (OpenGameArt.org), under CC0. The title of each track is in the Credits.
Sound effects
Kenney (kenney.nl), lentikula (itch.io) and OpenGameArt.org authors, under the CC0 license (public domain).
Images from the Pokémon games taken from Bulbagarden Archives, cropped and resized; the Kanto one is by Ryan Polito ("My Kanto Re-Creation Project").
Team Rocket logo
"Team Rocket Logo.svg" from Wikimedia Commons; it is a trademark of Nintendo / Creatures / GAME FREAK / The Pokémon Company.
Font
Press Start 2P (CodeMan38), under the SIL Open Font License, served by Google Fonts.
All other art
Hearts, doors, trapdoors, machines, altars, weapons, accessories, interface and the rest of the pixel art: made for this project.
Because of the CC BY-NC license of the sprites, PokeIsaac cannot have any commercial use. If you made an asset and are not credited, or want it removed, write to us and we will fix it.
4Content takedown
If you are a rights holder (or act on their behalf) and want any content removed, write to @SrBatai saying which. No formal notice is needed: we honor any good-faith request.
The content, or the whole project if so requested, will be removed within 72 hours at most. We will not dispute the decisions of the Pokémon rights holders.
Account: if you sign up, your email address and password. The password is stored encrypted by the account service (Supabase Auth) and nobody on the project can see it. You can also play as a guest, without an email.
Sign in with Google: if you choose «Continue with Google», Google confirms your email address and sends us your Google name and profile picture. We only use the email for your account (and the name, to suggest a trainer name you can change); we do not keep your picture and we never receive your Google password or anything else from your Google account.
Profile and progress: trainer name, profile picture (a Pokémon), game settings synced with your account, unlocked Pokémon and items, in-game currencies, stats, missions, cosmetics, sign-up date and last login.
Runs: Pokémon used, floor reached, kills, rooms, items, duration, mode and rewards, plus your saved run so you can continue it (also from another device).
Social: friends list, invitations and requests to join a co-op lobby, and whether you have a lobby open.
Gacha and shops: a record of purchases and of your last 50 pulls.
Fair play: automatic checks of runs, warnings, sanctions and the log of admin actions.
Reports: if you report a player, a name, a run or a bug, your report is stored with your trainer name, the reason, the text you write, who you are reporting and some context data (screen, game version, language and, for bugs, if you allow it, browser, screen size and last error). The team reviews reports and the outcome is noted; we also keep a counter of how many of your reports were confirmed so that false ones weigh less. The person you report is not told who did it. Appeals against warnings or suspensions work the same way: the text you write, your current warnings and the reason for the suspension are stored so an administrator can review them.
Chat and clans: if you write in the in-game chat (global, your clan or your friends), we store the message with your trainer name, your picture, your clan tag and the time. Global chat messages are visible to all players; clan messages to its members; friends messages to your friends. If you create or join a clan, we store its name, tag, description, who the leader is, its members and pending invitations and requests. If someone reports a message, a copy is kept with the report. Moderators can delete messages and temporarily mute people who break the rules.
Discord (optional): if you link your account with the official Discord, we store your Discord user ID (a number), the date of the link and whether you want your milestones announced. With it, the bot gives roles for your achievements and sets your trainer name as your nickname on that server. We do not read your messages or any other data from your Discord. You can unlink at any time from “My account” or with /unlink.
Ko-fi (donations): if you donate on Ko-fi, they process the payment under their own policy and notify us of the donation (amount, currency, message, transaction ID and your email). With that we work out your support level and give you the visual rewards (badge, frames, titles, trails; unless you hide it, your trainer name appears in the Credits and, at the top level, on an in-game plaque): we store the amount, the transaction ID, the account code you typed and a hash of your email, not the email itself. Other players only see your level, never how much you donated. Rewards have no cash value.
Errors: if the game crashes, the error message, its technical trace, the game version, your browser and system, screen size and page address are sent, linked to your account. They are only used to fix bugs.
Co-op: during a game with friends, positions, controls and game state are relayed in real time between players through our server; they are not stored. With direct connection (on by default; turn it off in Options > Data > "Direct connection"), the players in your room also connect directly to each other to reduce lag, so they can see your IP address. If you turn it off, everything goes through our server.
IP address: the technical providers receive it when you connect, as with any website. We do not store it in our database.
We do not ask for your real name, phone number, address, location or payment details.
Purposes and legal basis
Providing the service: account, saving your progress, Leaderboard, friends and co-op (GDPR art. 6.1.b).
Fair play and security: cheat detection, warnings, bans and rate limits (legitimate interest, art. 6.1.f).
Fixing game bugs (legitimate interest, art. 6.1.f).
Reviewing player reports and keeping a safe environment (legitimate interest, art. 6.1.f).
No ads, no analytics, no commercial profiling. Anti-cheat checks can only remove the rewards of a run, take you off the Leaderboard or suspend the account; you can appeal by writing to us.
What is public
Your trainer name, profile picture, frame and title, your Leaderboard scores and, for your friends, whether you are online. Do not use your real name as your trainer name.
Who it is shared with
We never sell or hand over your data. Only these technical providers process it, so that the game works:
Supabase: database, accounts and game files, on servers in the European Union (Ireland).
Railway: servers that relay co-op games (Europe and the United States); they do not store game data.
Google and Cloudflare (STUN servers): receive your IP address to help the players in a room connect directly; they do not relay any game. They are not used if you turn direct connection off.
Cloudflare (TURN server): if two players cannot connect directly, their (encrypted) game traffic goes through a Cloudflare TURN server, which sees your IP address; it stores nothing. It is not used if you turn direct connection off.
Discord: if you link your account, the official bot runs on the game’s Discord server; Discord Inc. processes your Discord data under its own policy.
Google Fonts: serves the game font, so it receives your IP address when loading it.
The hosting provider of this website, which serves the game files.
For providers outside the EU, transfers are governed by their own safeguards (such as the European Commission's standard contractual clauses). If you follow a link to X (Twitter), its own privacy policy applies.
What is stored in your browser
We use the browser's local storage (localStorage) only for what is essential: your account session, your preferences (volume, controls, language, fullscreen…) and which notices and news you have already seen. Your progress lives in your account, not in the browser. We do not use tracking or third-party cookies.
How long
Account data, for as long as the account exists.
A saved run is deleted when that run ends.
Only your last 50 Gacha pulls are kept.
Reviewed reports are deleted after 5 days; the reliability counter of the person who reported is kept while the account exists.
Text that the automatic filter blocks or censors (trainer and clan names, descriptions and chat messages) is kept for 14 days, together with your account identifier, so that the moderation team can review it. Chat messages are deleted after 3 days; unanswered clan requests and invitations, after 7 days. A clan is deleted when it has no members left.
You can delete your account yourself in Profile > My account > Delete account (we ask for your password and for you to type DELETE). Your profile, runs, progress, friends and Discord link are erased immediately. So that deleting and recreating an account cannot be used to repeat gifts, we keep a minimal trace for 12 months: a hash of your email, the gift codes you redeemed and the Discord ID that received the linking gift. A suspended account cannot be deleted until the suspension ends.
Ko-fi donation notices (amount, ID and email hash), while the account exists or until you delete it.
Your rights
You can request access, rectification, erasure (deleting your account), restriction or portability of your data, or object to its processing, by writing to @SrBatai with your trainer name. If you are not satisfied with the answer, you can file a complaint with the Spanish Data Protection Agency (aepd.es).
Minors
If you are under 14, you need permission from a parent or guardian to create an account (14 is the age of digital consent in Spain).
6Rules
No cheating: modifying the game, using programs or bots, or tampering with communication with the server. Suspicious runs get no rewards and the account receives warnings; three warnings bring bans of 1 hour, 5 hours, 24 hours and, finally, permanent ones.
Trainer names cannot be offensive, impersonate someone else or contain personal data. If they do, they are changed or the account is suspended.
PokeIsaac is provided as is, as a hobby project: it may change, reset progress or shut down at any time, with no right to compensation.