1. The short version
Binderly is a trading card collection tracker. Your collection is yours: we never sell, rent, or trade your personal data, and we never share your collection with advertisers. The app works fully signed out — if you never create an account, your cards, photos, decks, and wishlist stay on your device and are never uploaded to us. Card scanning happens entirely on your device; scanned images are never sent to us or to any third party.
2. What we collect
| Data | Why | When |
|---|---|---|
| Email address | Account sign-in, password reset, and wishlist alert emails | Only if you create an account |
| Collection data (cards, decks, wishlist, purchase prices, grading notes, badges, XP) | The core function of the app | On your device always; in our cloud only with sync enabled |
| Card and collection photos | Photos you attach to cards in your collection | On your device always; in our cloud only with sync enabled |
| Card scans (camera frames) | On-device text and image recognition to identify a card as you scan it | Only while scanning; processed on-device and never uploaded |
| PSA certification numbers you look up | Retrieving grading details from PSA's public cert database | Only if you use the grading advisor's cert lookup |
| Display name, username, avatar | Public profiles and group leaderboards | Only if you opt in to a public profile or join a group |
| Push notification token | Delivering wishlist deal alerts | Only if you grant notification permission |
| Crash reports and diagnostics | Finding and fixing bugs | Always (not tied to your collection contents) |
| Product analytics events (screens viewed, features used) | Understanding which features are worth building on | Always (aggregate; never your item details) |
| Subscription status | Unlocking premium features | Only if you purchase |
We never collect payment card details. All billing runs through the Apple App Store or Google Play, and we only ever see whether a subscription is active.
3. Service providers
We use a small number of processors, each limited to the purpose listed:
- Supabase — authentication, cloud sync database, and photo storage.
- TCGdex — the card catalog. Your search terms (card or set names) are sent to TCGdex's public API to look up card data and images; no account information is included.
- PSA — certification lookups. A cert number you enter is sent to PSA's API to retrieve public grading details for that card.
- RevenueCat — subscription entitlement management (status only, no card data).
- Google AdMob — advertising in the free tier. See section 5.
- Sentry — crash and error reporting.
- PostHog — product analytics.
- Resend — sending wishlist digest emails.
- Expo push notification service — delivering push alerts.
- eBay — when you search or view listings from your wishlist, or when the grading advisor estimates a value, that query is sent to eBay's public API. We participate in the eBay Partner Network, so listing links carry an affiliate tag and we may earn a commission on a resulting purchase at no additional cost to you.
4. Card scanning
Binderly's scan-to-add feature uses on-device machine learning (text and image recognition) to identify a card from your camera. Camera frames are analyzed locally on your device and are never uploaded, stored, or sent to us or any third party. Only the resulting card match — which you can review and correct — becomes part of your collection data.
5. Cloud sync, public profiles, and groups
Cloud sync is a premium feature and is opt-in. Until you turn it on, nothing about your collection leaves your device. When it's on, your cards, decks, wishlist, and photos are stored in our Supabase project so they can appear on your other devices. Rows are protected by row-level security — only your account can read them.
Public profiles and group leaderboards are also opt-in, and you choose which cards appear publicly. Leaderboards are built from aggregate statistics rather than your full item details.
6. Advertising and tracking
The free tier shows banner ads served by Google AdMob; a premium subscription removes them. On iOS, we ask for App Tracking Transparency permission before any personalized advertising identifier is used. If you decline, ads still appear but are non-personalized. In regions covered by GDPR, we present Google's consent flow and honor the choice you make there. We do not give advertisers your email address or any part of your collection.
7. Emails and notifications
If you enable wishlist alerts, we send a digest of new eBay listings matching your wishlist, by push notification, email, or both. Every digest email carries a one-click unsubscribe link and header, and you can turn alerts off at any time in the app's notification settings. We do not send marketing email.
8. Your rights and controls
In the app you can export your collection, delete your cloud data while keeping your account, or permanently delete your account and everything in it. For instructions or to request deletion directly, email [email protected].
California residents have the right to know what personal information we collect, to request its deletion, and to opt out of its sale — we do not sell personal information to anyone. EU and UK residents have rights under GDPR to access, correct, restrict the processing of, port, and erase their personal data. To exercise any of these rights, email [email protected]; we respond within 30 days.
9. Retention and security
We keep account data for as long as your account is active. When you delete your account, cloud-stored data is erased immediately and removed from backups within 30 days; deletion cannot be undone. Data is encrypted in transit (TLS) and at rest.
10. Children
Binderly is not directed at children. You must be at least 13 years old to create an account. If you believe a child has provided us personal information, contact us and we will delete it.
11. Changes and contact
If we make a material change to this policy we will update the date above and, for significant changes, notify you in the app. Questions? Email [email protected] or call (509) 381-3920.