Privacy & Data

Binder layouts, card positions, ownership markers, preferences and cached card information are stored locally in your browser. They are not uploaded simply because you create or edit a binder.

Browser data can be cleared by you, your browser, a device-management policy or privacy software. Use the JSON export as a restorable backup; PDF and spreadsheet exports are saved only where you choose.

When you deliberately select Share binder, the site creates a sanitised, view-only snapshot in a private Cloudflare R2 bucket. The snapshot contains the binder name and layout, card identifiers and artwork links, card order, pocket positions, owned or needed status, and the selected binder background.

Each link is unlisted rather than private: anyone who receives it can view and pass it on. Opening a shared link never imports that snapshot or replaces binders saved in the visitor's browser.

Shared links expire 180 days after creation. The Worker blocks expired links and the stored snapshot is removed through an R2 lifecycle rule. If you need a link removed sooner, email the full shared URL to mattg@pokemontcgvc.com.

The site uses Cloudflare Web Analytics to understand aggregate visits and page performance. Cloudflare states that this service does not use cookies or local storage to collect usage metrics and does not fingerprint visitors. Read the Cloudflare Web Analytics documentation.

To limit resource use, each internet connection can create up to ten shared links in a rolling 24-hour period. The application uses a one-way hash derived from the connection address to select a rate-limit record; it does not store the raw address in that record.

Card searches, set information and artwork come from the community TCGdex API. Requests may be served through the site's Cloudflare edge cache or sent to TCGdex directly, and card images are loaded from TCGdex's image service.

The donation panel embeds Ko-fi only after you open it. Interacting with that panel connects to Ko-fi and any payment is handled under Ko-fi's privacy policy and the policy of its payment provider.

Bug reports and other messages open your own email application. The site does not send them until you review and send the email yourself. Please avoid placing personal or sensitive information in binder names, shared binders or reports.

• Delete local binder data through the site's binder controls or your browser's site-data settings.
• Do not create a shared link if you do not want a snapshot stored in R2.
• Do not open the donation panel if you do not want the Ko-fi embed to load.
• Email mattg@pokemontcgvc.com with a shared URL if you need early removal or have a privacy question.