Privacy Policy

This Privacy Policy describes how Amaya Media ("we", "us", or "our") collects, uses, and protects your information when you use Binder Builder ("the Service"). We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

Information you provide

• Account information: When you create an account, we collect your email address and an optional display name. We use email/password authentication only.
• Collection data: The cards and variants you mark as owned or tracked in the Service.

Information collected automatically

• Authentication cookies: We use cookies solely for maintaining your login session. We do not use tracking cookies, advertising cookies, or analytics cookies.

Information we do not collect

• We do not use analytics or tracking services.
• We do not collect device fingerprints or IP addresses for tracking purposes.
• We do not serve advertisements or share data with ad networks.

2. How We Use Your Information

We use your information exclusively to:

• Authenticate you and maintain your login session.
• Synchronize your card collection across devices (Pro subscribers only).
• Process subscription payments through our payment provider.
• Display your profile information (display name) within the app.

3. Local Storage

Binder Builder stores your card collection data locally in your browser using localStorage. This data never leaves your device unless you are a Pro subscriber with cloud sync enabled, in which case it is also stored in our database.

Free users' collection data exists only in their browser. We have no access to it and cannot recover it if cleared. We recommend using the JSON export feature to create backups.

4. Data Storage and Security

Account and collection data is stored in Supabase (PostgreSQL database hosted on AWS). We use Row Level Security (RLS) to ensure users can only access their own data. All data is transmitted over HTTPS.

5. Third-Party Services

We use the following third-party services:

• Supabase — Authentication and database. Stores your account information and collection data (Pro users). Subject to Supabase's privacy policy.
• Polar.sh — Payment processing (Merchant of Record). Handles subscription billing, invoicing, and tax compliance. When you subscribe to Pro, Polar.sh collects payment information directly. We do not store your credit card details. Subject to Polar.sh's privacy policy.
• Vercel — Hosting and content delivery. Subject to Vercel's privacy policy.

We do not sell, rent, or share your personal information with any other third parties.

6. Data Retention

We retain your account and collection data for as long as your account is active. If you delete your account, we will delete your personal data and collection data from our servers within 30 days, except where retention is required by law or for legitimate business purposes (such as payment records required for tax compliance).

7. Your Rights

You have the right to:

• Access your data: Export your collection data at any time using the JSON export feature.
• Update your data: Edit your display name from your account page.
• Delete your data: Request account deletion by contacting us. This will permanently remove your account and associated data.
• Cancel your subscription: Manage or cancel your Pro subscription at any time through the customer portal on your account page.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

10. Contact

If you have any questions about this Privacy Policy or your data, please contact us at hello@amayamedia.com.