Skip to content

Privacy Policy

Last updated 3 September 2026

Binder is a collection tracker for the Pokémon Trading Card Game, made by Farpine LLC. This page says what the app and this website keep about you, in plain words. It is short because there is not much.

The short version

  • An account is an email address and a password. That is all we ask for.
  • Your collection, wishlist and trade list are stored on a server we run, so they follow you between phones.
  • The app sends us plain usage events — which screens you open, whether a scan matched. They are tied to your account, cut loose from it if you delete the account, and deleted after a year.
  • No ads, no trackers, no third-party SDKs. Nothing is sold or shared.
  • Scanning happens on your phone. The one exception is the visual match, which sends a crop of the card to our server, compares it in memory, and keeps nothing.

Your account

  • Your email address. It is your sign-in and the only way we can contact you.
  • Your password, stored as a bcrypt hash. We cannot read it and do not know it.
  • A display name, only if you choose to set one.
  • Sessions. Each sign-in creates a session: a random token (stored hashed), the time it was created and last used, and the device it came from. A session stops working when you sign out or after 180 days without use, and its record is purged within 30 days after that.

What the app stores on our server

  • Your collection — which cards and printings you own, with a quantity and a condition if you set them.
  • Your wishlist and trade list.
  • Usage events. The app sends these, by name: app_open, screen_view, scan_result, card_owned_changed, list_changed, signup, login and logout. Each carries what it is about — a screen name, a card and set, a variant, whether a scan matched and by which method — plus the platform, the app version and the time. They tell us which parts of Binder get used and whether scanning works. No location, no photo, no free text.

What is not collected

  • Your name, beyond a display name you choose to give.
  • Your location. The app never asks for it.
  • Your contacts and your photo library. Binder does not read either.
  • Photos. Scanning uses the camera live. Reading the set code and number happens on the phone, with Apple’s on-device text recognition; no image leaves the phone for that. If the number cannot be read and Binder falls back to visual matching, a cropped photo of the card is sent to our server, compared against the catalogue in memory, and discarded. It is not written to disk, not logged, and not kept.
  • Payment details. There is nothing to buy.
  • Advertising identifiers or device fingerprints of any kind.

No one else

There is no advertising, no analytics service, no crash-reporting service and no third-party SDK inside the app. Card images and prices are mirrored on our own server, and the app loads them from us. The odd image that is not in the mirror yet is fetched from the catalogue’s own image host until it is, and that host sees the request the way any web server does. Apple’s own systems — the App Store, TestFlight, and the crash reports iOS offers to share — are covered by Apple’s privacy policy, not ours.

We do not sell, rent or share your data with anyone. The only circumstance in which it would leave our hands is a legal requirement to hand it over.

Server logs

In production the server does not keep a per-request access log. It writes a small operational log — start-up, errors with the path that failed, what the daily catalogue sync did — that is capped at about 30 MB and overwritten as it fills. It exists to find out what broke and is not analysed for anything else.

Where your data lives

On a server we operate, rented from a hosting provider in the United States. Every connection between the app and the server is encrypted.

How long we keep it

  • Account, collection and lists — until you delete the account.
  • Usage events — 365 days, then deleted automatically; from the day you delete the account they carry no user id.
  • Sessions — until you sign out, or 180 days after their last use; the record is purged within 30 days after that.
  • Server logs — about 30 MB, the oldest lines overwritten as new ones arrive; there is no fixed number of days.

Deleting your account

In the app: Settings ▸ Account ▸ Delete account. The account, the collection, the lists and the sessions are deleted at once — no waiting period, no copy kept. The usage events are not deleted on the spot: at the same moment they are detached from the account, so nothing in them points at you any more, and they age out with everything else within a year. If you would rather not open the app, email support@farpine.com from the account’s address and we will do it.

Children

Binder is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, email us and we will delete it.

This website

No cookies, no analytics and no scripts that talk to anyone. The same server serves these pages, so the operational log described above is the only record there is, and nothing else.

Changes

If this policy changes, the date at the top changes with it. Material changes will be noted in the app’s release notes.

Contact

support@farpine.com
Farpine LLC, Rathdrum, Idaho, United States.