Your privacy matters. This policy explains what data we collect, why we collect it, and how you stay in control. We don't sell your data — ever.
The short version
We collect only what we need to run the service. We don't sell your data, show you ads, or share your collection with card publishers. Your binders are yours. You can export or delete everything at any time.
What we collect
When you use My TCG Binder, we collect:
- Account information — email address, username, and password (hashed).
- Collection data — the cards, binders, pages, and notes you create.
- Usage data — which features you use, when you log in, and error reports that help us fix bugs.
- Device data — browser type, OS version, and IP address for security and abuse prevention.
- Payment data — if you subscribe, our payment processor (Stripe) handles card details. We only see a billing summary.
What we don't collect
We do not collect:
- Your real name (unless you choose to add it to your profile).
- Your location beyond rough region (country/state from IP).
- The contents of your private binders for any purpose other than displaying them to you.
- Data from children under 13.
How we use it
We use the data we collect to:
- Operate and improve the service.
- Send transactional emails (password reset, billing receipts).
- Detect abuse and keep the service secure.
- Provide aggregate, anonymised analytics about how features are used.
We do not use your collection data to train AI models. We do not profile you for advertising.
Who sees what
Public binders — visible to anyone with the link and indexed by search engines.
Unlisted binders — visible to anyone with the exact link; not indexed.
Private binders — visible only to you when logged in. We cannot access the contents for any purpose other than operating the service.
Our team — engineers can access data to debug issues and respond to support requests, under strict internal access controls. We log all such access.
Third parties — we share data with infrastructure providers (hosting, email, payments) only as needed to run the service, under data processing agreements. We do not sell data to any third party.
Cookies & tracking
We use a small number of essential cookies to keep you logged in and remember your preferences. We do not use third-party advertising trackers or social media pixels.
We use privacy-respecting analytics (no cross-site tracking, no fingerprinting) to understand which features are used. You can opt out in your account settings.
Your rights (GDPR / CCPA)
If you are in the European Economic Area, the UK, or California, you have specific legal rights over your personal data. We honour these for every user regardless of location.
- Right to access / portability (GDPR Art. 20 · CCPA) — Download a complete copy of everything we hold on you: your profile, every binder and card, and your wishlists. Go to Account → Your data → Export my data →
- Right to erasure (GDPR Art. 17 · CCPA) — Delete your account and all associated data permanently. Any active subscription is cancelled immediately. Your data is removed from our systems within 30 days. Go to Account → Danger zone → Delete account →
- Right to rectification — Update your email, display name, or bio in Account settings.
- Right to restrict processing — Contact us at support@mytcgbinder.com and we will pause processing while we investigate.
- Right to object — You can opt out of analytics in Account settings. We do not process data for direct marketing.
- Change binder visibility — Set any binder to Private, Unlisted, or Public from within the app at any time.
Requests are fulfilled within 30 days. If you'd prefer to make a request by email rather than through the app, write to support@mytcgbinder.com.
Data retention
We keep your data for as long as your account is active. When you delete your account, your data is removed from our systems within 30 days, except where we're required to retain it by law (e.g. billing records for tax purposes, retained for 7 years).
Anonymised, aggregated analytics data (e.g. "X users opened the set tracker this month") may be retained indefinitely as it cannot be linked back to you.
Children's privacy
My TCG Binder is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at support@mytcgbinder.com and we will delete it promptly.
Contact
Privacy questions or requests? Email support@mytcgbinder.com. We'll respond within 5 business days. For general questions, hello@mytcgbinder.com works too.