Your privacy matters. This policy explains what data we collect, why we collect it, and how you stay in control. We don't sell your data — ever.
The short version
We collect only what we need to run the service. We don't sell your data, show you ads, or share your collection with card publishers. Your binders are yours. You can export or delete everything at any time.
What we collect
When you use My TCG Binder, we collect:
- Account information — email address, username, and password (hashed).
- Collection data — the cards, binders, pages, and notes you create.
- Usage data — which features you use, when you log in, and error reports that help us fix bugs.
- Device data — browser type, OS version, and IP address for security and abuse prevention.
- Payment data — if you subscribe, our payment processor (Stripe) handles card details. We only see a billing summary.
What we don't collect
We do not collect:
- Your real name (unless you choose to add it to your profile).
- Your location beyond rough region (country/state from IP).
- The contents of your private binders for any purpose other than displaying them to you.
- Data from children under 13.
How we use it
We use the data we collect to:
- Operate and improve the service.
- Send transactional emails (password reset, billing receipts).
- Detect abuse and keep the service secure.
- Provide aggregate, anonymised analytics about how features are used.
We do not use your collection data to train AI models. We do not profile you for advertising.
Who sees what
Public binders — visible to anyone with the link and indexed by search engines.
Unlisted binders — visible to anyone with the exact link; not indexed.
Private binders — visible only to you when logged in. We cannot access the contents for any purpose other than operating the service.
Our team — engineers can access data to debug issues and respond to support requests, under strict internal access controls. We log all such access.
Third parties — we share data with infrastructure providers (hosting, email, payments) only as needed to run the service, under data processing agreements. We do not sell data to any third party.
Cookies & tracking
We use a small number of essential cookies to keep you logged in and remember your preferences. We do not use third-party advertising trackers or social media pixels.
We use privacy-respecting analytics (no cross-site tracking, no fingerprinting) to understand which features are used. You can opt out in your account settings.
Your controls
You can at any time:
- Export all your data from Settings → Account → Export data.
- Delete your account from Settings → Account → Delete account.
- Change visibility of any binder from the binder settings.
- Opt out of analytics in Settings → Privacy.
- Request a copy of your data by emailing support@mytcgbinder.com.
Data retention
We keep your data for as long as your account is active. When you delete your account, your data is removed from our systems within 30 days, except where we're required to retain it by law (e.g. billing records for tax purposes, retained for 7 years).
Anonymised, aggregated analytics data (e.g. "X users opened the set tracker this month") may be retained indefinitely as it cannot be linked back to you.
Children's privacy
My TCG Binder is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at support@mytcgbinder.com and we will delete it promptly.
Contact
Privacy questions or requests? Email support@mytcgbinder.com. We'll respond within 5 business days. For general questions, hello@mytcgbinder.com works too.