Your cards,
your business.
This policy is written to be read, not to protect us from you. Here is everything PullBinder collects, why, and what we will never do with it.
Effective July 19, 2026
What we collect
- Account information. Your email address, either given directly or from Google when you sign in with Google. If you claim an @handle, we store the handle, display name, and bio you choose.
- Your collection. The cards you add — names, sets, grades, conditions, quantities, purchase prices, and notes. This is the product; without it there is nothing to value.
- Swap activity. When you trade with another collector: the cards on each side, chat messages, photos you attach, confirmations, and reviews. This record exists so both sides can point to what was said and shown.
- Messages you send us. If you email or use the contact page, we keep the correspondence.
We do not collect your precise location, your contacts, or anything from your device beyond what the pages need to work.
How we use it
To run PullBinder: value your cards, chart your portfolio, render your public profile if you make one, and power swaps between collectors. Price lookups sent to our market-data sources describe cards, never you. We use aggregate product data (how many users, which features get used) to decide what to build next.
What we never do
We don't sell your data. We don't share your collection with anyone unless you choose to — a public profile shows what you make public, a share link shows what you put in it, and both are off by default. We don't run ads and we don't let third parties track you on our pages.
Who touches the data
PullBinder runs on infrastructure providers who process data on our behalf: Supabase (database, authentication, and photo storage) and Railway (hosting). If you sign in with Google, Google knows you authenticated with us; their privacy policy governs that step. We share data with no one else, except if the law compels us.
Cookies and local storage
We store your sign-in session in your browser so you stay signed in, and your display preferences so the app remembers how you like it. That's it — no advertising cookies, no cross-site trackers. Because we never track you across other sites, there's nothing to opt out of, and we treat every visit as Do-Not-Track by default.
Your controls
You can make your profile private or delete your handle at any time in Settings. You can delete cards, messages won't be shown outside a swap's two participants, and share links expire on the schedule you set. To delete your account and everything in it, email hey@pullbinder.com from your account email — deletion is permanent and includes your collection, swaps, and photos.
Your rights over your data
Wherever you live, you can ask us to show you what we hold about you, correct anything wrong, hand it back in a portable form, stop a particular use, or delete it entirely. Email hey@pullbinder.com from your account address and a person handles it — usually within 45 days. We may first confirm it's really you, so nobody else can request your data in your name. Asking costs you nothing and never changes how we treat you.
If you live in California (and similar states)
California's privacy law, and similar laws in a growing list of other states, give residents specific rights: to know what personal information we collect and why, to get a copy, to have it deleted, and to not be treated differently for exercising any of them. What we collect is listed under What we collect above — your account details, your collection, swap activity, and messages you send us. We do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is no "sale" or "sharing" to opt out of. To use any of these rights, email hey@pullbinder.com.
Security
Data is encrypted in transit and access to production systems is restricted. No system is perfect; if a breach ever affects your data, we'll tell you plainly and quickly.
How long we keep it
We keep your account and collection for as long as your account is open. When you delete your account, we remove your collection, swaps, and photos within about 30 days — except anything the law requires us to hold longer, such as records tied to tax or fraud. Support emails are kept while they're useful and then cleared, and server logs roll off within a few months.
Children
PullBinder is not directed at children under 13, and we don't knowingly collect their data. If you believe a child has an account, contact us and we'll remove it.
Changes
If this policy changes in a way that matters, we'll say so on the site before it takes effect — not bury it. The effective date above always reflects the current version.
Contact
Questions, corrections, deletion requests: hey@pullbinder.com. A person reads it.