Privacy Policy

Effective and last updated September 4, 2026

This Policy explains how BinderPop handles information when you use its website, installed web app, mobile app, account, and related services. BinderPop is designed so a collection is private unless its owner deliberately shares it.

Information we handle

• Account information: user ID, email address, display name, avatar, authentication provider, and authentication records. Apple or Google supplies this information only when you choose that sign-in method.
• Collection information: owned-card selections, quantities, binder settings, watchlists, transaction-stage choices, save times, optional profile text and general location, and your profile, binder, and quantity visibility choices. Do not enter a street address as your community location.
• Communications and community content: feed posts, photos you choose to upload, attached-card references, direct messages, card offers, blocks, abuse reports, and the account information needed to deliver and moderate them; support emails and information you include in them.
• Service information: ordinary hosting, security, and error logs such as request time, IP address, user agent, requested route, and error details that infrastructure providers may process to run and protect the Service.
• On-device information: guest progress, cached card data, settings, and scan photos may be held in local browser or app storage. Guest information is not intentionally uploaded as an account save unless you sign in and claim that progress.

How we use information

We use information to authenticate users; save and synchronize binder progress; provide watchlists, selective binder sharing, community posts, private messages, profiles, and collector offers; process blocks and abuse reports; answer support requests; prevent abuse; diagnose failures; secure and back up the Service; and comply with law. We do not use BinderPop account or collection information for third-party advertising, and we do not sell personal information.

When information is visible or shared

Your collection, quantities, binders, and profile are private by default. You separately choose whether signed-in collectors can discover your profile, see every owned card or selected binders, see quantities, and submit offers. Feed posts and any photo attached to them are visible to signed-in collectors. Uploaded photos are resized and re-encoded to remove embedded metadata, including ordinary EXIF location metadata, but you should still avoid photographing addresses or private documents. A direct message is visible to its participants, subject to safety review when reported. A vendor link is available to anyone who has that unguessable link. Offer recipients see the sender name, email, message, card, and proposed price. You can remove posts, block collectors, report content, turn off public choices, or contact support.

Service providers

BinderPop uses service providers only to operate the Service. Production infrastructure is hosted by Google Cloud and Firebase for the web application, authentication, account data, private artwork and community-photo storage, edge delivery, and managed backups; Apple or Google also processes information when you choose its login service. Community photos are stored in a separate non-public bucket and delivered only after a signed-in request. When artwork is not already stored by BinderPop or bundled with the app, the BinderPop server may retrieve it from TCGdex, Pokémon TCG Developers, or another documented catalog source and retain its own copy. The ordinary artwork request is made by our server rather than hot-linked from your device. Those providers process information under their own terms and privacy notices. We require providers handling personal information for us to protect it and use it for the contracted service.

Retention, backups, and deletion

Live account and collection records are kept while the account is active. Community posts, attached photos, and messages remain until removed under the feature’s controls, moderation, or account deletion. Deleting a post also schedules its attached photo for deletion. Abuse reports may be retained as reasonably necessary to document and prevent misuse. When you permanently delete the account, its live profile, progress, public binder, posts and uploaded photos, conversations, blocks, and associated offers are deleted. Managed disaster-recovery backups and storage soft-delete protection rotate on limited schedules and may temporarily retain a deleted record before expiration. Security and hosting logs may be retained for the provider’s documented operational period. Support correspondence is kept as long as reasonably needed to resolve and document the request.

Guest data remains on the device until the browser or app removes it, you clear it, or you import it into a signed-in account. Removing the app may not remove cloud account data; use the in-app deletion control first.

Your choices and privacy rights

You can use the core binder in guest mode; separately control profile, binder, selected-binder, quantity, and offer visibility; delete posts; block collectors; export progress; sign out; and initiate permanent account deletion inside the account panel. You may also ask to access, correct, delete, or receive a copy of personal information by emailing [email protected]. We may need to verify that you control the account. Depending on where you live, you may have additional rights and the right to appeal or complain to a regulator.

Security and international processing

We use access controls, encrypted transport, per-user database rules, restricted service credentials, and encrypted backups. No system is perfectly secure, so keep your devices and sign-in accounts protected. Infrastructure providers may process information in countries other than your own, subject to their transfer safeguards and applicable law.

Children

The Service is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us so it can be deleted.

Changes and contact

We may update this Policy as features or law change. We will post the new date here and provide additional notice when required. Privacy questions can be sent to [email protected].