Privacy Policy

What we collect

• Account details — your email address, username, and date of birth when you register, plus when you last signed in. We sign you in with one-time codes sent to your email; we never ask for or store a password.
• Your collection data — cards you add to your collection, storage locations, watchlist, wishlist, decks, price alerts, and any purchase or sale transactions you record.
• Preferences — settings such as condition price modifiers, your bulk price threshold, and preferred card language.
• Search history — your recent card searches, so we can show them back to you. Some search and display preferences are also kept in your browser's local storage.
• Affiliate link clicks — when you follow a "buy" link to a store, we record the store, the card, your account (if signed in), and your IP address.
• Usage analytics — pages you visit and actions such as adding a card, creating an alert, or importing a CSV, collected through PostHog to help us improve the app.
• Server logs — IP address, browser user-agent, and request path, used for security and troubleshooting.

How we use it

• To run the app: sign you in, show your collection, and calculate its value.
• To send you emails you ask for — sign-in codes, email-change confirmations, and price alert notifications.
• To prevent abuse, such as rate-limiting sign-in code requests.
• To understand which features are used and fix problems.

What others can see

Your collection, watchlist, wishlist, and alerts are private. Decks are private by default. If you make a deck public, anyone with its link can see the deck's cards and your username.

What we do not do

• We do not sell your personal data or share it with advertisers.
• We do not store payment card details.
• We do not send your data to card marketplaces. Price data is collected on our servers on a schedule, not on your behalf.

Cookies and local storage

We use a session cookie to keep you signed in. PostHog sets its own cookie and local storage entries to count visits and tell sessions apart. We also use your browser's local storage for conveniences such as recent searches and your saved view and filter settings.

Third-party services

• Resend — delivers our emails, so it receives your email address and the message contents. See Resend's Privacy Policy.
• PostHog — product analytics. See PostHog's Privacy Policy.
• OVHcloud — hosts our servers and database.
• Stripe — if paid plans are offered, Stripe processes payments. We would store only your Stripe customer ID and subscription status. See Stripe's Privacy Policy.
• Patreon — if you support us on Patreon, Patreon handles that relationship under its own policies.
• Card stores — buy links take you to TCGplayer, Card Kingdom, Mana Pool, and other stores, some through affiliate programs. Once you leave The Digital Binder, that store's privacy policy applies.
• Card and price data — card data and images come from Scryfall; prices come from MTGJSON, TCGplayer, Card Kingdom, Cardmarket, Mana Pool, and other marketplaces. None of these receive your personal data from us.

Your choices

• Export your collection as a CSV at any time, free, from the collection page.
• Change your username or email address in Settings.
• Delete your account in Settings. This immediately and permanently removes your account along with your collection, decks, alerts, watchlist, wishlist, transactions, and search history. Records of store links you clicked are kept without your account or IP address. Copies may remain in server backups for a short time before they are overwritten.
• Email us to request a copy of your data or to ask any privacy question.

Children

The Digital Binder is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has created an account, contact us and we will delete it.

Changes

We will update this page when what we collect or how we use it changes, and revise the date at the top.