Privacy Policy

Unbinder (“we”, “us”) is an independent mobile application for cataloguing Pokémon trading cards. We collect the minimum amount of information needed to operate the service.

What we collect

• Account data. Email address and an Unbinder-issued user ID, used to sign you in and tie your collection to your account.
• Collection data. The cards, binders and prices you log inside the app. This is private to your account.
• Scan images. Photos taken by the in-app scanner for card identification are sent to our identification service and discarded as soon as the match completes (within seconds). These scan images are not stored on our servers.
• Card photos you attach. Separately from scanning, you can attach a front and/or back photo to any card in your collection. Unlike scan images, these are stored — they are saved to our private storage bucket so we can show them back to you on the card detail screen. You can remove them individually inside the app, and they are deleted in full when you delete your account.
• Product analytics. Before you sign in, events are tied to an anonymous device ID generated on your phone. After you sign in, those events are linked to your Unbinder user ID so we can debug issues that affect specific accounts. We do not send your name, email or collection contents to our analytics provider — only event names and the screen they happened on.

Where your data lives

Unbinder uses a small set of carefully chosen processors, all based in the EU where possible:

• Supabase (EU). Stores your account (email, user ID), your collection data (binders, boxes, cards, slots) and the card photos you attach. Supabase is our database, authentication and storage provider.
• Resend (EU, Ireland). Sends you transactional emails such as magic-link sign-in links. Resend never receives your collection data.
• Google Gemini API. Receives the photo you take with the in-app scanner so we can identify the card. The photo is processed in memory for the duration of the request and is not stored by Unbinder. We send the image, receive the text match, and discard the original.
• PostHog (EU, Frankfurt). Receives the product analytics events described above.

We do not share your data with any other third party for their own purposes.

What we never do

• Sell, rent or share your collection with third parties.
• Use your data for advertising profiling.
• Store payment details — Unbinder does not process payments today.
• Collect crash reports or device diagnostics. If this changes in a future release, we will update this policy and the store listings before that release ships.

Affiliate partnerships

When you tap a “buy” link on a card or sealed product, Unbinder may add an affiliate tag and send you to the merchant's website. Affiliate tagging means we earn a small commission if you buy, at no extra cost to you. The programs we participate in are:

• eBay Partner Network (EPN) — for eBay listings.
• Amazon Associates — for Amazon listings.
• Cardmarket affiliate program — for Cardmarket listings.
• TCGplayer — outbound links (no commission program currently active).

Once you leave Unbinder, the merchant's own privacy policy applies and they may set cookies on their domain. We do not see what you buy or how much you spend. See our affiliate disclosure for details.

Your rights (GDPR)

Unbinder is operated from the Netherlands. EU users have the right to access the data we hold about them, to correct it, to export it in a portable, machine-readable format (right to data portability), to delete it, to restrict or object to our processing of it, and to lodge a complaint with their national data protection authority. Email support@unbinder.app and we'll action the request within 30 days.

Deleting your account

You can permanently delete your Unbinder account from inside the app: go to Settings → Account → Delete account. Deletion is immediate and removes your authentication record, your collection, your binders, and your analytics user ID. There is no recovery window — once gone, it is gone. If you'd rather not use the in-app flow, email support@unbinder.app and we'll action the request within 30 days.

How long we keep your data

• Account data (email, user ID): kept until you delete your account.
• Collection data (binders, boxes, cards): kept until you delete it from the app, or until you delete your account.
• Scan photos: not stored — discarded immediately after card identification (typically within seconds).
• Attached card photos (front/back photos you add to a card): kept until you remove them inside the app, or until you delete your account.
• Analytics events: kept for up to 12 months in PostHog, then aged out.
• Email logs (sign-in links sent via Resend): kept for up to 30 days for delivery troubleshooting, then deleted.
• Backups: encrypted database backups are retained for 30 days, after which deleted accounts are unrecoverable even from backup.

Children

Unbinder is not directed at children. We do not knowingly collect personal data from children under 13 (or under 16 in the EU, where applicable). If you believe a child has created an account, email support@unbinder.app and we will delete the account and any associated data without delay.

Contact

Questions? Reach the human behind Unbinder at support@unbinder.app.