Privacy Policy
What We Collect
Email address: Used for sign-in via magic link. This is the only personal information we require.
Collection data: Which cards you've collected, cost basis entries, and notes you add to your binder slots.
Display name: An optional name you set for your public binder profile.
Anonymous usage analytics: We record which pages are viewed, first-party and cookieless. We never store your IP address or browser details — only an anonymous identifier that resets every day and cannot be traced back to you or linked across days.
What We Don't Collect
We do not collect passwords (we use passwordless magic link auth), payment card details (handled entirely by Stripe), browsing history, location data, contacts, or any data from your device beyond what you explicitly enter into DexBindr.
How We Use Your Data
Your email is used for authentication and account emails (sign-in links, subscription confirmations), and for occasional product-update emails about new DexBindr features. You can opt out of product updates at any time via the unsubscribe link in any such email, or by contacting us — you'll still receive essential account emails. Your collection data is used to power your binder, sync across devices, and generate your personal stats. If you enable public sharing, your display name and collection are visible at your share link. We do not sell, rent, or share your data with advertisers.
Who Sees Your Data
Private by default. Your collection is only visible to you unless you explicitly enable public sharing in Settings. When sharing is on, anyone with your share link can view your binder. You can turn sharing off at any time.
Third-Party Services
Supabase: Hosts our database and handles authentication. Your email and collection data are stored in Supabase's infrastructure.
Stripe: Processes payments. We never see or store your card details. Stripe's privacy policy applies to payment data.
Resend: Sends our emails (magic links, subscription confirmations, and product updates). Receives your email address for delivery.
Vercel: Hosts the application. Standard web server logs (IP address, user agent) are collected by Vercel as part of normal operation.
Umami: Privacy-focused web analytics. Collects anonymous, aggregated usage data. No cookies, no personal data, no tracking across sites.
Data Retention
Your data is retained for as long as you keep your account, including after subscription expiry — come back a year later and your binder is still there. You can export your collection as JSON at any time. To delete your account and all associated data permanently, email us at hello@dexbindr.com.
Your Rights
You can export all your data as JSON from the Settings page. You can request deletion of your account and all associated data by emailing hello@dexbindr.com. Deletion is permanent and cannot be undone.
Children
DexBindr is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at hello@dexbindr.com.
Cookies
DexBindr uses only essential cookies required for authentication (Supabase session tokens). We do not use advertising cookies, tracking cookies, or third-party cookies. Local storage is used to cache your collection data for offline access.
Changes
We may update this policy. Continued use after changes means acceptance. Material changes will be noted on this page with the updated date.