Introduction
Bindyr (“Bindyr,” “we,” or “us”) cares about the privacy of the people who use bindyr.io and the services offered through it (together, the “Service”). This Privacy Policy describes the information we collect, why we collect it, how we share it, and what you can do about it. By using the Service you consent to the practices described here, along with our Terms of Service. If you do not agree with this policy, please do not use the Service.
Information collected automatically
When you use Bindyr, certain technical information about your device and your interaction with the Service is collected automatically. This may include your IP address, browser type and version, operating system, device type, approximate geographic location derived from your IP, the pages you visit, the time and duration of your visits, referring URLs, and basic diagnostic information used to detect errors and improve reliability. We use this information to operate and maintain the Service, to troubleshoot technical problems, and to understand in aggregate how Bindyr is used so we can improve it.
Information you provide
Some information is collected only because you choose to give it to us. This includes your email address and a hashed password when you create an account, your Google account identifier if you sign in with Google, and any profile details you fill in (username, display name, avatar image, bio, referral info). It also includes the content you create inside the Service: your binders, decks, card boxes, notes, comments, and any card photos you upload through the scan feature. You control what is private and what is public; content you mark public can be viewed by anyone and may appear in search results.
Cookies and similar technologies
What they are. Cookies are small text files that websites store on your device. Bindyr also uses your browser’s localStorage, which works similarly. Together we refer to these as “cookies.”
Why we use them. Cookies keep you signed in, remember your preferences (such as which tab you were last viewing), help us understand how the Service is used through analytics, and let our advertising partners show and measure ads. Without cookies, core features like authentication will not work.
How to control them. Most browsers let you reject or delete cookies. If you do, parts of Bindyr will stop working correctly, including the ability to sign in. To learn more about cookies generally, you can visit allaboutcookies.org.
Advertising
Bindyr displays advertisements served by Google AdSense and its network partners. These third-party advertisers may use cookies and similar identifiers to serve ads based on your previous visits to Bindyr and to other sites across the web, and to report on ad performance. Bindyr does not directly share your email, username, or collection data with advertisers. You can opt out of personalized advertising through Google Ads Settings or, for participating networks, at aboutads.info/choices. For background on Google’s practices, see How Google uses information from sites that use its services.
How we use information
We use the information we collect to run and improve the Service. That includes authenticating you, syncing your data across devices, providing customer support, showing public content you have chosen to share, measuring performance and usage, detecting and preventing abuse or fraud, delivering and measuring advertisements, sending service-related communications, and complying with legal obligations. We do not use the content of your private binders or decks to train machine-learning models.
How we share information
Bindyr shares information only in the ways described below. We do not sell personal information for money.
Service providers. We rely on trusted third parties to run Bindyr: Supabase (database, authentication, file storage), Vercel (website hosting), and Google (OAuth sign-in, Analytics, and AdSense). These providers may process your data on our behalf under their own terms.
Card data providers. We query Scryfall for card data and images. Those queries include card names but do not include personal information about you.
Other users. Any content you mark public is visible to other users of Bindyr and may also be indexed by search engines.
Legal and safety. We may disclose information when we believe it is necessary to comply with the law, a valid legal request, or to protect the rights, property, or safety of Bindyr, our users, or others.
Business transfers. If Bindyr is involved in a merger, acquisition, financing, or sale of assets, user information may be transferred as part of the transaction. We will notify affected users if that happens.
Links to third-party sites
The Service contains links to outside websites, including retailers like TCGPlayer and Card Kingdom and informational sites like Scryfall. We are not responsible for the privacy practices or content of those sites. When you follow an outbound link, the destination’s own privacy policy applies, not ours.
For California residents
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights regarding your personal information. These rights include the ability to request access to the categories and specific pieces of personal information Bindyr has collected about you over the past twelve months, to request deletion of that information, to request correction of inaccuracies, to request that your personal information not be sold or shared for targeted advertising, and to designate an authorized agent to act on your behalf. Bindyr will not discriminate against you for exercising these rights. To submit a request, email support@bindyr.io with enough information that we can reasonably verify your identity. We will respond within the timeframes required by law.
For EEA and UK residents
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on one or more of these legal bases: to perform the contract that exists between us when you use the Service, to pursue our legitimate interests in running and improving the Service, with your consent where required (for example, for some advertising cookies), and to comply with legal obligations. You have the right to access, correct, delete, port, or restrict processing of your personal data, and to lodge a complaint with your local data-protection authority.
Children
Bindyr is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us at support@bindyr.io and we will delete it.
Data retention
We keep your account data for as long as your account is active. When you delete specific content or your account, we remove it from our active systems promptly; copies may persist in encrypted backups for a limited period before being overwritten. Analytics data is kept according to Google Analytics’ default retention, typically fourteen months for event-level data.
Security
We use reasonable technical and organizational safeguards to protect your information, including encryption in transit, hashed passwords, and row-level access controls in our database. No method of transmission or storage is perfectly secure, however, so we cannot guarantee absolute security. You are responsible for keeping your account password confidential.
International transfers
Bindyr is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US and other countries where our service providers operate. Those countries may have data-protection laws different from those in your home country.
Do Not Track
Some browsers send a “Do Not Track” signal. Because there is no industry-wide standard for how to interpret this signal, the Service does not currently change its behavior in response to Do Not Track requests. You can still control advertising cookies through the opt-out links above.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top and, where appropriate, provide additional notice through the Service. Please review this page occasionally to stay informed.
Contact
If you have questions, requests, or complaints about this Privacy Policy, email us at support@bindyr.io.