made by Kicko
YOUR KANTO STRATEGY COMPANION

Build your next winning team.

Plan your formation. Evolve your carries. Make every slot count.

PvP BETAIndependent fan-made tool

Overlay permissions, privacy & security

Know what you are installing. This explanation covers the downloadable Kanto Academy overlay v0.6.4, reviewed on 25 October 2026.

Independent, ad-free fan project

Kanto Academy is a free community companion. We do not display advertising. Pokémon names and artwork belong to their respective rights holders; our fan-site notice is not a license or a claim of official affiliation.

The developer welcomed community API sites in a Discord announcement on 23 October 2026 and responded positively to Kicko’s description of a third-party extension overlay on 20 October 2026. These statements are documented in screenshots retained by the maintainer. They are not an independent security endorsement, a license to third-party artwork, or approval for automated gameplay.

Official Kanto Tactics API supplies game data. Results retain their source dates and coverage. Editorial rankings and suggested formations are labelled separately.

Review status

We reviewed the packaged manifest and scripts and compared them with our source files. This is a maintainer code review assisted by AI, not an independent security audit, browser-store approval, or guarantee of safety. Installation and live PvP behavior have not been independently verified. Future versions need a new review.

What permissions does it request?

The manifest requests no cookies, browsing-history, tabs, clipboard or network-request interception permissions. Page access still matters: a content script can read content within its permitted game frame.

What does the overlay read and save?

It checks visible game button text, accessibility labels, item image labels and element positions to recognize active PvP gameplay and anchor the formation board. The overlay also remembers your selected game mode in session storage for that tab, to stay hidden outside PvP. Poké Ball markers identify recommended Pokémon in the readable shop, and star markers identify recommended items on readable game controls. Markers are visual only and disappear when the overlay is hidden or outside recognized PvP. The simplified UI does not display owned-copy tracking. Previously saved counters may remain in local storage for compatibility.

Share links you paste are decoded and validated locally. The code does not fetch the pasted link. It saves your team and preferences locally, not to a Kanto Academy account.

In the reviewed code, we found no password, cookie, private-message or browsing-history collection. It does not buy, reroll, equip items or send game commands for you.

Does it send anything elsewhere?

We found no telemetry, analytics, outbound network requests, background service worker or remotely loaded executable code in the reviewed extension. Its scripts, team data and image assets are bundled in the ZIP. Source-credit URLs in the dataset are references, not requests made by the overlay.

This describes the extension code only. Kanto Tactics and the browser may make their own requests independently.

The website has separate usage tracking

Kanto Academy’s website has optional first-party usage tracking for page views, estimated daily visitors, composition loads, share-button clicks and extension download clicks. These events go to Kanto Academy’s analytics endpoint; the extension does not send them.

The website uses a daily rotating random browser identifier. Its analytics feature does not store IP addresses, referrers or team contents. Statistics are owner-only and retained for approximately 90 days. Hosting providers still process normal requests to serve the website and downloads.

Manage this using Usage privacy → Usage tracking at the bottom of the Builder page. Tracking is off by default for new visitors. It runs only after you enable it; an existing explicit choice is preserved. You can disable it at any time.

Inspect the download yourself

Download kantolab-overlay.zip · v0.6.4. Extract it before installing: manifest.json lists permissions and script scope; overlay.js, core.js and planner.js contain the behavior. The scripts are included as readable source.

The manifest and executable JavaScript in this ZIP matched our reviewed source files. SHA-256 of the reviewed ZIP:

08f42d1a45b7f787d4a6a78ff7266d99e7fe43dbea0f14796229644d2cfe446b

A matching checksum identifies this exact package; it is not proof that code is safe. Download from Kanto Academy and inspect any different package separately.

Updates, removal & reporting concerns

This unpacked extension does not update automatically. To update, download the new ZIP, replace the files in your extension folder, reload the extension in your browser and refresh the game. Recheck permissions with each release.

To stop it, disable Kanto Academy Companion on your browser’s Extensions page. To remove it and its extension-local settings, choose Remove, then refresh the game. Website storage and website tracking preferences are separate.

If you notice unexpected permissions, network activity or behavior, disable the extension and report the version and what happened to Kicko through the community conversation where the overlay was shared. Do not include passwords, cookies or private account details. No public security issue tracker is currently provided.

Unofficial fan tool. Not affiliated with or endorsed by Einoow or Pokémon rights holders. The developer’s response covers the informational overlay as described; new gameplay automation is outside that stated scope.

Your privacy choice

Optional usage statistics help us understand which tools are useful. They are off by default.

← Back to Team Builder