Privacy Policy

The short version

• Your collection is private by default. Nobody else sees it unless you turn on a share link.
• No ads, no analytics or tracking tools, and we don't sell or share your personal information for advertising.
• Card scanning reads your cards on your device. We don't keep scan photos.
• Price providers never get your data. We ask them for card prices, not about you.
• BinderSpark is for ages 13 and up. If you're under 18, ask a parent or guardian first.
• You're in control: export your data, delete anything, or delete your whole account.

Who we are

BinderSpark is made by NWK Designs Inc., a California corporation based in San Luis Obispo County, California, USA ("BinderSpark", "we", "us"). We're responsible for the personal information described here.

Questions: [CONTACT EMAIL]. Mail: [MAILING ADDRESS, optional].

What this policy covers

The BinderSpark website and web companion at [DOMAIN] (including public share pages), and the BinderSpark apps for Android and iOS. They all use the same account and the same data.

Preview today: in the current preview, accounts and collections are stored only in your browser on your device and nothing is sent to a BinderSpark server. The preview sign-in is a placeholder, not a real security boundary. This policy describes BinderSpark once accounts and syncing go live.

Information we collect

Your account

• Email address, to sign in and for account emails such as password resets.
• Password, stored only as a one-way hash by our sign-in provider, never in readable form.
• Display name (optional; otherwise the first part of your email). You can change it any time.
• Age check: at sign-up we ask the year you were born, only to confirm you're 13 or older. We don't save the year.
• Account details: account ID, plan (Free or Pro), renewal date, default collection, created and updated dates.
• Character: the profile character you pick (or Bolt, the default). It's cosmetic and doesn't change prices or signals.

If you use Sign in with Google or Sign in with Apple, that company tells us your email address, a name if you allow it, and an account ID. We never get your Google or Apple password. With Apple you can choose to hide your email; we then get a private relay address.

Your collection

• Collections (names, type, order, private or shared).
• Items: raw cards, graded slabs and sealed product, with the details you add (quantity, condition, grading company, grade, certificate number, binder page and slot, status).
• Money details you enter: purchase price and date, how you got it, sold price and date. Manual prices you enter are private to you.
• Notes, wishlist entries, your fee and signal settings, and a change history for your items (so you can undo).

Certificate numbers. To catch mistakes and fraud, our server may privately note when more than one account lists the same grading company and certificate number. We never show your certificate numbers to anyone else.

Pro subscriptions

BinderSpark Pro costs $3.99 per month [confirm price and any tax at launch]. You pay through Google Play (Android), the Apple App Store (iOS) or [WEB PAYMENT PROVIDER, e.g. Stripe] (web). The store or payment provider handles your card; we never see or store your card number. They tell us only what we need to give you Pro: that you subscribed, the plan, an order reference, and when it renews or ends.

Technical information

When your device connects to our servers we receive your IP address, device and browser type, app version and request times. We use them to run the service, keep it secure and limit abuse (for example, rate-limiting share pages). Each installation also gets a random sync ID so your devices stay in step.

What we don't collect

No location, contacts, microphone audio, calendar, health data or advertising ID. No advertising, analytics or tracking SDKs. (On Android, Google ML Kit sends Google limited technical data, see Who we share with.)

Camera and card scanning

BinderSpark uses your camera, or a photo you pick, only when you tap a scan button.

• The card names and numbers are read on your device (in the browser with the open-source Tesseract reader; on Android with Google ML Kit on-device text recognition; on iOS with [iOS on-device reader, e.g. Apple Vision]).
• If a card isn't in the built-in list, the app may send only the text it read (for example "045/094") to the card catalog to look it up, never the photo.
• Nothing is added to your collection until you tap Add. The photo stays in memory while you review and is gone when you leave the screen. We don't keep scan photos.
• A backup path can read a photo on our server if your device can't. If used, the photo is processed in memory only and thrown away.
• Unfinished scans expire after 24 hours. For cards you add, the scan result (the text read and the match you picked) stays with the item's history.
• We do not send card photos to any cloud recognition service (such as Google Cloud Vision). We'll update this policy and tell you before that ever changes.

How we use information

• Provide BinderSpark: your account, syncing, values, charts, signals and the settings you choose.
• Run share links you turn on, and provide Pro.
• Send account emails (password resets, security notices, important changes). No marketing email unless you opt in.
• Keep BinderSpark safe and fix problems, using our own server logs (no third-party analytics).
• Follow the law and enforce our Terms.

We don't use your information for advertising or build advertising profiles.

Share links: what others can see

Every collection is private unless you turn on its share link. Anyone with the link sees a read-only page with the collection name, your display name, the items (name, set, number, image, quantity, grade) and set progress. Values appear only if you leave "Show values" on.

A share page never shows your email, account ID, purchase prices, notes, certificate numbers, scan photos or results, or your signals.

Links are long and random and we ask search engines not to index them, but anyone you give a link to can pass it on. You can turn a link off or replace it at any time. Teens: think before sharing, and consider a nickname as your display name.

Who we share information with

We don't sell your personal information. We share it only like this:

• Service providers that run BinderSpark for us (hosting, database, sign-in, email): [SERVICE PROVIDERS, e.g. Cloudflare, auth provider, email sender]. They may use it only to provide their service to us.
• App stores and payments: Google Play, the Apple App Store and [WEB PAYMENT PROVIDER] for downloads and Pro, under their own privacy policies.
• Google ML Kit (Android): reads card text on your phone and doesn't send images or text to Google, but sends Google limited technical data (device model, OS and app version, an installation ID, performance and error data). See ML Kit terms.
• Card catalog and images: card data comes from [CATALOG PROVIDER, currently pokemontcg.io], and card images load from image hosts such as images.pokemontcg.io and images.scrydex.com. Like any website, they can see your IP address and device type. They receive card searches, not your account or collection.
• Price providers ([PRICE PROVIDERS, e.g. JustTCG, PokemonPriceTracker]): our server asks them for card prices. We never send them your name, email, collection, purchase prices, notes or photos.
• People you choose, through share links.
• Legal reasons: if the law requires it, or to protect the safety and rights of users, the public or BinderSpark.
• If BinderSpark changes hands: your information may move to the new owner under this policy or one at least as protective. We'll tell you first.

Links to marketplaces such as TCGplayer or eBay are covered by their own privacy policies.

Cookies, storage and tracking

No ads, no analytics, no cross-site tracking. BinderSpark stores your sign-in, collection (for offline use) and preferences in your browser's or app's local storage, plus cached card images and reader files. Signing out or clearing site data removes them. We honor Do Not Track and Global Privacy Control signals; since we don't track or sell, there's nothing extra to switch off.

Children and young collectors

Pokémon cards are loved by collectors of all ages, so we're careful here.

• BinderSpark is not directed to children under 13, and we don't knowingly collect personal information from anyone under 13. You must be 13 or older (or older if your country requires it) to create an account. We ask your birth year at sign-up (and don't keep it). If the answer means you might be under 13, sign-up stops, and that browser can't simply try again with a different year.
• We don't offer accounts to under-13s with parental consent at this time. If we ever do, we'll get verifiable parental consent first, as the U.S. Children's Online Privacy Protection Act (COPPA) requires, and update this policy.
• Parents: if you think your child under 13 has an account, email [CONTACT EMAIL] and we'll delete the account and its data promptly.
• Teens 13 to 17: collections are private by default, there's no chat or messaging, and we don't sell or share your data. Ask a parent or guardian before subscribing to Pro.

How long we keep information

Your choices and deleting your account

• Export your whole account as a file, or a collection as CSV, in Settings. [Export to be finished before launch]
• Correct or delete items, collections, notes, prices and wishlist entries any time.
• Delete your account in Settings → Account → Delete account, on the web at [DOMAIN]/delete-account, or by emailing [CONTACT EMAIL] from your account address. [Delete-account button and page still to be built; Google Play and Apple require them]

Deleting your account doesn't cancel an app-store subscription by itself. Cancel Pro in Google Play or in your Apple ID subscriptions so you aren't charged again.

Your California privacy rights

We're based in California and give these rights to everyone. Under the California Consumer Privacy Act (as amended by the CPRA) you can ask to know and access, delete or correct your personal information, and to opt out of sale or sharing (we do neither) or limit use of sensitive information (we use your sign-in details only to sign you in). We won't treat you differently for asking. Email [CONTACT EMAIL]; we'll verify the request from your account email and answer within 45 days. An authorized agent may ask for you with your permission.

Categories we collect: identifiers (email, display name, account ID, IP address), commercial information (your collection and Pro status), internet activity (server logs) and sensory information (card photos, processed and not kept). None are sold or shared for advertising, and we don't knowingly sell or share data of anyone under 16. "Shine the Light": we don't share personal information for others' direct marketing.

Security and where data is stored

Connections are encrypted (HTTPS), passwords are hashed, each account can only reach its own data, provider keys stay on our server, and share links use long random codes. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires. Data is stored and processed in the United States [HOSTING REGION].

Changes and contact

If we change this policy we'll update the date at the top, and for important changes we'll tell you in the app or by email first.

NWK Designs Inc., San Luis Obispo County, California, USA · [CONTACT EMAIL]