Privacy Policy

The short version

• We store your account and the collection data you enter.
• We don't sell your data, and we don't show ads.
• We use a small number of service providers to run the site — they're named below.
• You can ask us to delete everything, and we will.

Who we are

Binderverse is operated by Shalimar Luis LLC, West New York, New Jersey, United States. For anything in this policy, email privacy@binderverse.app.

What we collect

Things you give us

• Account details — email address, username, and a password (stored hashed; we never see it). Optionally a display name, bio, avatar and profile colour.
• Your collection — the cards you track, your binders, wishlists, tags and notes.
• Images you upload, where image upload is available to you. See Automated screening.
• Anything you send us — feedback, invite requests, newsletter sign-ups, support email.

Things we record as you use the site

• Usage events — pages viewed and actions taken, so we can tell which parts of the product are used. Tied to your account.
• Error reports — when something breaks, we log what broke and where.
• Consent records — when you accept our Terms and Acceptable Use Policy, we record the date, which version you accepted, your IP address and your browser's user-agent string. We keep this so we can show what was agreed and when.
• Aggregate analytics — visitor counts and page views, via Vercel Analytics.

Cookies

We use cookies to keep you signed in. That's it — no advertising cookies, no third-party tracking pixels, no cross-site profiling.

Automated screening of uploaded images

Where image upload is available, every image is checked automatically before it is saved. To do that we send a small copy of the image to OpenAI's moderation service.

We send the image and nothing else — not your name, not your email, not your binder. We keep the result of the check (the verdict and the category scores) against the stored image, so we have a record of what was checked and when.

We may add or change screening providers, including hash-matching services used to detect child sexual abuse material. If we do, we'll update this page.

Who else sees your data

We don't sell your personal information, and we don't share it for advertising. We use these providers to run the service:

• Supabase — accounts, database and file storage. Hosted on Amazon Web Services in the United States (us-east-1).
• Vercel — website hosting and aggregate analytics.
• OpenAI — automated image screening, as described above. Images only.
• Scrydex — the trading card catalogue. We look up card data; we don't send them anything about you.

We may also disclose information where the law requires it — including, as our Acceptable Use Policy explains, reporting child sexual abuse material to the National Center for Missing & Exploited Children, which federal law both requires and requires us not to notify you about.

How long we keep things

Your account and collection data stay until you delete them or ask us to. If you delete your account, we delete your data, including your consent records and any images you uploaded — except where the law requires us to retain something, in which case we keep only that.

Aggregate analytics that can't identify you may remain after deletion.

Your choices

Email privacy@binderverse.app and we'll help with any of these:

• Get a copy of what we hold about you.
• Correct anything that's wrong.
• Delete your account and everything in it.

We don't require you to be in a particular place to ask. Depending on where you live you may have additional rights — tell us and we'll honour them.

Children

Binderverse is not for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, email us and we'll remove it.

Security

Data is encrypted in transit. Access to the production database is limited to the operator. We are a small early-beta product, not a bank — we take this seriously, but no service can promise perfect security, and we won't pretend otherwise.

Changes

If we change this policy, the date at the top changes. For anything significant, we'll tell you rather than relying on you to notice.

Contact

Shalimar Luis LLC, West New York, NJ 07093
privacy@binderverse.app