How Pokédex Binder handles your data.
This privacy policy describes how Pokédex Binder (“the app,” “we,” “our”) handles information when you use the app and the website at pokedexbinder.app (“the site”).
We’ve kept this short and plain-English on purpose. If anything here is unclear, email pokedexbinderapp@gmail.com and we’ll explain or fix it.
TL;DR
- The app stores your collection, want list, and settings only on your device.
- We don’t have a server that holds your card data. We don’t sync it. We don’t sell it. We can’t see it.
- The only personal information that ever reaches us is the email address you choose to enter on our website’s launch list — and that’s just so we can email you when the app goes live or has a major update.
- Card images and market prices are pulled from public APIs (pokemontcg.io, TCGplayer). When the app makes those requests, your IP address is briefly visible to those services — same as any web browser visiting any website.
1.What the app stores
Everything below is stored on your iPhone only, inside the app’s sandboxed storage. It does not leave your device unless you delete and reinstall the app, in which case it’s lost.
- Which Pokémon TCG sets you’ve added to your library
- Which cards you’ve marked as owned, and their condition (Gem Mint, Near Mint, etc.)
- Which cards are on your want list
- Per-binder display preferences (sort, filter, favourites, nicknames)
- A local cache of card images and metadata to make the app work offline
We do not collect, transmit, store on our servers, or share any of this with anyone.
2.What the app does NOT collect
The app does not collect:
- Your name
- Your email address (inside the app — see §3 for the website)
- Your location
- Your contacts
- Your photo library (the camera scanner reads one photo at a time — that photo is processed on-device and never uploaded)
- Analytics, behavioural data, crash reports, or usage telemetry
- Any device identifier for advertising
There are no third-party analytics SDKs (Google Analytics, Firebase, Mixpanel, etc.) embedded in the app.
3.What the website collects
The website at pokedexbinder.app has one form: a launch-list email signup.
If you enter your email address there:
- It’s submitted to beehiiv, a third-party email-marketing platform (privacy policy).
- Beehiiv stores your email on its servers and notifies us of new subscribers. We can see your email address, the date you signed up, and (if your browser passed them) any UTM parameters that identified which post or platform brought you in.
- We use that email only to send launch announcements and occasional major-update notifications.
- We do not sell, rent, or share that email with anyone else.
- You can ask us to delete your email at any time by replying to any email from us, or by emailing pokedexbinderapp@gmail.com directly. We’ll remove you within 7 days.
The website itself uses no analytics, no tracking cookies, no advertising pixels. The only cookies set are by Cloudflare for basic site-delivery security (their privacy policy).
4.Third-party services we call from the app
The app fetches data from these public services so it can show you cards and prices. When the app makes those calls, the destination service sees your IP address (same as any internet request).
| Service | What we use it for | What they see |
|---|---|---|
| pokemontcg.io | Card images, set metadata, base card list | Your IP, the requested set or card ID |
| TCGplayer.com | Market prices, “Buy” links from the Want List | Your IP, the destination URL only when you tap Buy |
We do not send these services your name, email, or any personally identifying information from inside the app. They don’t know who you are. They just see a request from a phone.
5.Children
The app does not knowingly collect personal information from anyone, including children under 13 (or the equivalent minimum age in your jurisdiction). Apple rates the app 4+ because it has no objectionable content, but the app is not specifically directed at children — it’s designed for adult collectors.
If you believe a child has provided personal information through the website’s email form, contact pokedexbinderapp@gmail.com and we will delete it promptly.
6.Your rights (GDPR / CCPA / Quebec Law 25 / similar)
You have the right to:
- Know what data we hold about you (it’s just your email if you signed up for the launch list)
- Request a copy of it
- Request correction or deletion
- Object to processing
To exercise any of these rights, email pokedexbinderapp@gmail.com. We’ll respond within 30 days, usually within 7.
7.Security
We can’t lose data we don’t have. The app stores everything on your device under iOS’s standard app sandboxing, which encrypts data at rest using the device’s Secure Enclave when the device is locked.
The website is served over HTTPS only, with HSTS preloaded (required by the .app TLD). All requests are encrypted in transit.
If you believe you’ve found a security issue, please email pokedexbinderapp@gmail.com with details. We will acknowledge within 72 hours.
8.Changes to this policy
If we change this policy, we’ll update the “Last updated” date at the top and, if the change is material (new data collection, new third-party service, etc.), we’ll notify launch-list subscribers via email and post a notice on the website.
The current version always lives at pokedexbinder.app/privacy.
9.Contact
Questions, deletion requests, security reports, or anything else:
pokedexbinderapp@gmail.com
Pokédex Binder is an independent collector tool developed and operated by Ron Prestage in Ontario, Canada.
10.Legal disclaimer
Pokédex Binder is not affiliated with, endorsed, or sponsored by Nintendo, Creatures Inc., GAME FREAK, or The Pokémon Company. Pokémon and Pokémon character names are trademarks of those companies. Card images, set metadata, and price data are provided by the pokemontcg.io and TCGplayer APIs under their respective terms of use.