Privacy Policy
BinderScan · Effective date: September 11, 2026 · Last updated: October 13, 2026
1. Who we are
BinderScan is a mobile app that lets collectors scan Pokémon trading cards, catalog them, and see estimated market values. The BinderScan app and the website at binderscans.com are operated by Stoddard Design Lab LLC ("Stoddard Design Lab," "we," "us," "our"), 787 Dean Street, Apt. 1R, Brooklyn, NY 11238, USA, and you can contact us at binderscantcg@gmail.com (see Section 13). "BinderScan" is the name of our app and service, not a separate legal entity. This policy explains what information we collect through the BinderScan app and website, and how we use, share, and protect it.
BinderScan is an independent tool and is not affiliated with, endorsed by, or sponsored by The Pokémon Company, Nintendo, or any card grading company.
2. Information we collect
Information you provide
- Account information — your email address and, if you sign in with Google or Facebook, the basic profile information they share (such as your email). Passwords are handled by our authentication provider and are not stored by us in readable form.
- Profile information — the display name and profile photo you choose.
- Collection content — photos of the cards you scan, and the card details associated with them (name, set, number, condition, estimated value, and notes).
- Social content — posts and captions you share to the in-app Feed, and any seller/marketplace links you add to your public shops.
- Referrals — the referral code you share or redeem.
- Communications — the content of messages you send us for support or feedback.
Purchases
When you buy scan packs (or any other in-app purchase), payment is processed by Apple through the App Store. We receive confirmation of the purchase and a transaction identifier so we can add the scans to your account. We do not receive or store your payment card or financial account details.
Information collected automatically
We collect a limited amount of technical information needed to run and maintain the app, such as app version, device model and operating-system version, IP address and the coarse location (such as country or region) inferred from it, and basic usage and error information (for support, security, and diagnostics). We do not track you across other companies' apps or websites, and we do not use your data for third-party advertising. (See our App Store privacy label and the app's Privacy Manifest for the categories of data we collect, which we keep consistent with this policy.)
3. Card photos & artificial intelligence
Identification. When you scan a card, the photo is sent to a third-party artificial-intelligence service that reads the image and returns the card's identity. We currently use Anthropic's Claude API as the primary identification service and Google's Gemini API as a fallback; both process the image in the United States. The image is transmitted securely and used to perform the scan you requested — it is not used by these providers to train their own models.
Improving our scanner. We may retain cropped card images from reviewed scans, together with the identification and any correction you made, to measure and improve the accuracy of card recognition and to train future identification models. The scanner is built to accept only trading cards and sealed products: an image it cannot read as a card or sealed product is rejected at the time of scanning and is not added to your collection or kept for training. As an added safeguard, we automatically and periodically re-check the images retained for training and permanently delete any that are not trading-card images. These are images of trading cards; we do not use them to identify you. (See also the license you grant in our Terms of Use.)
On-device recognition. To make re-scanning faster and to save your scans, the app also creates a mathematical “feature print” of the cards you scan and keeps a small library of these on your device. When you scan a card that closely matches one you scanned before, the app can recognize it on your device, without sending the photo to any identification service. This library stays on your device, is not uploaded to us, and is cleared if you delete the app or your account data.
We also send card details (such as name, set, and number) to third-party card-pricing data providers to look up market values. We send card data, not personal information, for this purpose.
4. How we use information
- Provide, operate, and maintain the app and your account;
- Identify your cards and estimate their value, and keep your collection and value history up to date;
- Operate community features such as private friend groups, the Quests hub, the Feed, and shops;
- Process purchases, apply scan allowances, and run the referral program;
- Respond to your support requests and send you service-related messages;
- Measure and improve the app, including the accuracy of card identification (see Section 3);
- Detect, prevent, and address fraud, abuse, and security issues; and
- Comply with legal obligations and enforce our Terms.
5. How we share information
We do not sell your personal information. We share information only as described here:
- Service providers who process data on our behalf, including: our hosting, authentication, database, and storage provider (Supabase); our content-delivery and image-safety provider (Cloudflare), which serves images and screens them for known child sexual abuse material (CSAM); an automated content-moderation provider (SightEngine), which screens images and text you post to public areas of the app for objectionable content, and screens text for personal contact details, off-platform links, and spam; the AI identification providers (Anthropic and Google); card- and graded-card pricing data providers (for example JustTCG, TCGtracking, pokemontcg.io, and TCGdex); and Apple (for in-app purchases). We do not authorize these providers to use your information for their own purposes.
- Other users — certain information is public within the app (see Section 6).
- Legal and safety — to comply with law, respond to lawful requests, or protect the rights, property, or safety of BinderScan, our users, or others. This includes reporting apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) and/or law enforcement as required by law.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
Safety & content moderation. Images and text you post to public areas of the app — Feed posts and captions, comments, your display name, and your profile photo — are automatically screened for objectionable content, using the content-moderation and content-delivery providers named above; text is also screened for personal contact details, off-platform links, and spam, and images served publicly also pass through automated scanning for known CSAM. Where our systems or a user report identify content that violates our Terms, we remove it and may suspend or terminate the account; apparent CSAM is reported to NCMEC and/or law enforcement as required by law. Your card scans are not posted publicly and are not screened in this way. See Section 6 of our Terms of Use for how we handle objectionable content and abusive users.
6. Information others can see
Some information is visible to other BinderScan users by design:
- Your display name and profile photo, and your collection statistics (such as card count, total value, level, and trophies), where they appear in the private friend groups you join and on your public profile;
- Anything you deliberately post to the Feed; and
- The shop/marketplace links you choose to make public.
Your email address is never shown publicly. You control what you post to the Feed and which shops are public.
7. Retention & deletion
We keep your account information and collection content for as long as your account is active. You can permanently delete your account and its associated data at any time from the app (Collector Passport → Delete Account). After deletion, we may retain certain information where required for legal, security, or fraud-prevention reasons, and we may retain de-identified or aggregated information (such as anonymized card-price observations and training images of cards) that is not linked to you.
8. Your choices & rights
- Access and update your profile information in the app;
- Delete your account and data from the app;
- Camera and photo permissions can be changed at any time in your device's Settings;
- Depending on where you live, you may have additional rights — for example, under the EU/UK GDPR: to access, correct, delete, restrict or object to processing, port your data, and to withdraw consent; and under the California CCPA/CPRA: to know, access, correct, and delete your personal information and to opt out of its "sale" or "sharing." To exercise these rights, contact us using Section 13.
- We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. Because we do not sell or share, there is nothing to opt out of; where your browser or device sends an opt-out preference signal (such as Global Privacy Control), we treat it consistently with this position.
- We will not discriminate against you for exercising any of these rights.
How to exercise your rights. You can access, update, and delete most of your data directly in the app; for anything else, email us at the address in Section 13. To protect your account, we will verify a request by confirming control of the email address on file before we act on it, and we may ask for additional information where a request concerns sensitive data. You may use an authorized agent to submit a request on your behalf, in which case we may require proof of the agent's authorization and verification of your identity. If we decline a request, we will tell you why, and — where your state's law provides an appeal process — how to appeal. Residents of other U.S. states with comprehensive privacy laws (for example Virginia, Colorado, Connecticut, Texas, Oregon, and Montana) have comparable rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale, and certain profiling; because we do none of those things, there is nothing to opt out of. We respond within the timeframe your law requires (for California and most states, generally within 45 days).
9. Children & age assurance
You must be at least 13 years old (or the minimum age of digital consent in your country, if higher) to use BinderScan. BinderScan is not directed to children under 13, and we do not knowingly collect personal information from them; if you believe a child under 13 has provided us personal information, contact us and we will delete it. We determine your age from your device's age-range signal or, where that isn't available, a required age declaration when you first use the app; for this we store only a coarse age range, never your date of birth. Users we identify as under 13 are blocked from creating or using an account. Users under 18 receive a limited, protective experience — a chronological feed only, with no personalized, ranked, or discovery surfaces, and no targeted content or behavioral advertising (BinderScan contains no third-party advertising or tracking SDKs for any user). If you are between 13 and the age of majority where you live, you may use BinderScan only with the involvement and consent of a parent or legal guardian, who is responsible for your use of the app and any charges. BinderScan does not knowingly permit anyone under 13 to create or keep an account, so we do not operate a service directed to children under 13 within the meaning of the Children's Online Privacy Protection Act (COPPA).
App-store age signals. To comply with app-store accountability / age-verification laws in certain U.S. states (for example Texas, Utah, Louisiana, and California), your device's app store may share an age category or age-range signal with the app. We use this signal only to apply age-appropriate protections, to decide whether verifiable parental consent is required before you accept our Terms or make a purchase, and to comply with applicable law. We do not use it for advertising or profiling, we do not sell or share it with third parties, and we do not retain the transmitted age-verification data longer than needed to perform the verification (and we delete it afterward where the law so requires). We do not ask you for your date of birth, and age signals are never added to our analytics or marketing records. The signal we use is Apple's Declared Age Range API where your device supports it; where it does not, we use the required in-app age declaration described above. In both cases we convert the result to a coarse age range and discard the underlying input — we do not store the date of birth you enter or the raw age-range response, and no age signal or age-range data is shared with our analytics, advertising, or other third-party processors. We retain only the resulting coarse range, for as long as your account is active, to keep applying the right age-appropriate protections.
10. Security
We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International users
BinderScan is currently offered in the United States and is not directed to, or offered in, the European Economic Area, the United Kingdom, or Switzerland. BinderScan is operated from, and stores data in, the United States, and our card-identification providers (Anthropic and Google) also process card images in the United States. If you use the app from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your country. Because we do not offer the Service in the EEA, the United Kingdom, or Switzerland, we do not currently transfer personal data from those regions. If we begin offering BinderScan there, we will put an appropriate transfer mechanism in place first — such as the European Commission's Standard Contractual Clauses, together with the UK Information Commissioner's Office International Data Transfer Addendum for data from the United Kingdom — and update this policy accordingly.
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice in the app. Your continued use of BinderScan after an update means you accept the revised policy. For a minor's account, a material change will require renewed age confirmation, and renewed verifiable parental consent where applicable law requires it, before continued use. We maintain an internal consent version for this policy and our Terms; when a change materially affects a minor's use of the app, we increment it, and the next time an account in our under-18 age category opens the app we require it to re-confirm its age before continued use (declining or restricting the account where developer-level verifiable parental consent is required and has not been obtained).
13. Contact
Questions or requests about this policy or your data: binderscantcg@gmail.com.