Short version: we collect the minimum needed to run a collection tracker and an API, we don't run ads,
we don't sell data, and payments are handled by Stripe so card numbers never touch our servers.
What we collect
- Account data: a username, a password (stored only as a modern salted hash), and — optionally — an
email address used for verification and password resets.
- Your collection: the cards, counts and binders you track. That's the product.
- Payment data: handled entirely by Stripe, our merchant of record. We store only your Stripe customer
reference and your plan — never card numbers.
- API usage: per-token request counts, for quotas and billing.
- Server logs & metrics: standard technical logs and aggregate counters (requests, signups) for
keeping the service healthy. No advertising trackers, no third-party analytics scripts, no fingerprinting.
What we do with it
- Run the Services. That's it.
- We don't sell or share personal data with third parties, except Stripe (payments) and our infrastructure
providers (hosting, DNS/CDN) as needed to operate.
- Emails are used for account security (verification, resets) — not marketing, unless you explicitly opt in to
something later, which doesn't exist today.
Cookies
One httpOnly session cookie keeps you signed in. No advertising or cross-site cookies.
Your choices
- Export your collection as JSON at any time.
- Use the tracker without an email address at all (you lose password recovery, but it's your call).
- Delete your account and its data by emailing [email protected].
Where data lives
On servers in the United States, encrypted in transit (HTTPS everywhere), with regular backups.
Shared binder links are public to whoever holds the link — that's their purpose — and can be revoked by you at any time.
Changes
Material changes to this policy will be announced on this page with a new date.
Questions: [email protected].