BinderScanner is run by M.Lighthouse Agency LLC ("we", "us"), 1250 Wayzata Blvd E #1144, Wayzata, MN 55391, USA. This policy explains what we collect when your family uses BinderScanner at binderscanner.com and app.binderscanner.com, why, and what you can do about it. Questions: [email protected].
The short version
- A parent or guardian (18 or older) creates the account. Kids get profiles inside it, with a nickname, a picture and a PIN. Kids never give us an email address.
- Card photos are read and then thrown away. We don't store them.
- No selling or renting of data. The app has no ads and no advertising or analytics trackers. Our public website (binderscanner.com, not the app) uses Google Analytics to count visits and measure our own ads.
- You can ask us to delete your family's account and data at any time.
What we collect
From the parent who creates the account
- Your name, your family's name and your email address.
- Your password and PIN, stored only as one-way hashes.
- Whether you've confirmed your email address.
- If you buy a plan: payments are handled by Stripe. We receive your plan, billing status and a Stripe customer reference. We never see or store your full card number.
For each collector profile (including kids)
- The name or nickname you type, the picture and colour you pick, and a PIN stored as a hash.
- Their binder: which cards they own, how many, favourites, wish list, badges earned, trades with family members, and daily collection value totals.
- Whether a parent has turned on dollar values for them.
When anyone scans a card
- The photo is sent to Cloudflare Workers AI, which reads the text printed on the card (name, number, set, HP). We don't save the photo.
- We keep a short scan record: the text that was read, which card it matched, how confident the match was, how long it took, and the time. We use these records to count your daily scans and to make the matching better.
- When a match is close, the text that was read (never the photo) is sent to a text classifier through Cloudflare's AI Gateway to choose between the likely cards.
- Point the camera at the card. If a photo happens to show a face or anything else, it's processed only to read the card and isn't kept.
Devices
- When a parent sets up a phone or tablet, we store a name for it (like "iPhone"), when it was added and when it was last used. The device keeps a sign-in key in the browser's local storage. That's how it remembers your family without anyone typing a password again.
- Our servers keep standard technical logs (IP address, time, request) for security and rate limiting.
On our public website
Our public website at binderscanner.com (the pages about BinderScanner, the card lists and these policies) uses Google Analytics. It sets cookies and records which pages you visit, the page or ad that brought you, your device and browser type, and your approximate location (city level, from your IP address). We use it to see which pages and ads bring families to BinderScanner. We've turned off Google's advertising features: this data isn't used to build ad audiences or personalize ads. For visitors in the European Economic Area, the UK and Switzerland, analytics cookies are off by default. You can also block it with your browser's privacy settings or Google's opt-out add-on. Google Analytics is not used inside the app at app.binderscanner.com, and nothing about your family, your kids or their binders is sent to it.
What we don't collect
Inside the app, we don't use advertising cookies, analytics trackers, social media pixels or location. We don't ask kids for an email address, phone number, school, birthday or photo of themselves.
How we use it
- To run the app: identify cards, keep each binder, show prices and set progress, and enforce plan limits.
- To send account email: confirming your address, password resets, receipts and billing notices. We don't send marketing email unless you opt in.
- To keep the service secure: rate limits, preventing abuse and debugging.
- To improve card matching, using the scan records described above.
Who we share it with
We use these service providers only to run BinderScanner, and only with the data each needs:
- Cloudflare: reads card photos (Workers AI), routes the text classifier (AI Gateway), stores our nightly backups (R2) and runs our DNS.
- Hostinger: hosts our server and database.
- Resend: sends account email.
- Stripe: processes payments.
- Google: Google Analytics on our public website only (see "On our public website" above).
We don't sell or rent personal information, and we don't share your family's account or binder information for advertising. We may disclose information if the law requires it, or to protect our users or the service. If BinderScanner is ever sold or transferred, this policy continues to apply to the information we hold.
Card prices come from public TCGplayer market data and card images from public card databases. Nothing about your family is sent to them.
Children's privacy
BinderScanner is designed for families with kids, so we keep the data about children to the minimum the app needs:
- Only an adult parent or guardian can create an account, and they confirm they are 18 or older when they do.
- The parent creates each kid's profile and chooses what goes in it: a nickname, a picture from our set and a PIN. Kids have no email address, password or public profile.
- Kids can't contact anyone outside their family. Trades happen only between members of the same family, and a parent approves each one.
- Dollar values are hidden from kids unless a parent turns them on.
- A parent can see everything in their family's account, remove a kid's profile (which deletes that kid's binder), or ask us to delete everything. Email [email protected] from the account's email address.
If you believe a child created an account without a parent, contact us and we'll delete it.
How long we keep it
We keep your account data while your account exists. Scan records are kept for up to 12 months. When you delete a profile or your family's account, we delete it from the live database straight away. Copies in our nightly backups expire within 14 days.
Your choices and rights
- See and change: parents can see and edit their family's profiles in the app (Me, then Parent zone).
- Export: ask us for a copy of your family's data and we'll send it as a file.
- Delete: remove a profile in the app, or email us to delete the whole family account.
Depending on where you live (for example California, or the EU or UK), you may have further rights to access, correct, delete or move your data, or to object to how we use it. Email us and we'll respond within 30 days. We'll never treat you differently for using these rights.
Security
All connections use HTTPS. Passwords and PINs are stored as one-way hashes. Each family's data is walled off from every other family's, and each device needs a parent to set it up. No system is perfectly secure. If we learn of a breach affecting your information, we'll tell you as the law requires.
Where your data is processed
We're based in the United States and our providers process data in the US and other countries. By using BinderScanner you understand your information will be processed there.
Changes
If we change this policy in a way that matters, we'll update the date above. If we've changed how we use personal information, we'll also tell account holders by email before the change takes effect.
Contact
M.Lighthouse Agency LLC, 1250 Wayzata Blvd E #1144, Wayzata, MN 55391, USA. [email protected]