Privacy policy

Last updated: October 19, 2026

Fair Binder is an app for card collectors. This policy is written in plain words.

1. What we don’t collect

• Your binder itself never goes to our server: cards, quantities, prices paid, folders and notes stay on your phone.
• Most of the app works without an account. An account is needed only for the market (section 4).
• Recognition photos never leave your phone; recognition runs on the device. Only the photos of a listing you publish in the market go to our server (section 4).
• No ads, no third-party trackers, no selling of data.

2. What is stored, and where

• Your collection (cards, quantities, prices paid, tags, notes, want list and sales) is stored on your phone, and in your own iCloud if you turned the backup on.
• Deleting the app deletes it, unless your phone’s backup, a backup file or an export kept a copy.
• Files you choose to import (a CSV or a backup file) are read on your phone only.

3. What the phone asks our servers for

To show current prices, the app downloads public files once a day:

• a general price table for all cards, not only yours;
• price history by set, for the sets you have cards in;
• new-card packs;
• card images;
• currency rates: the Bank of Israel representative rate for the shekel, the European Central Bank for the euro.

These requests carry no name, account or identifier of yours. The delivery network (Cloudflare) and the host see an IP address, as with any browsing, to deliver and protect the service; we don’t use it to identify anyone.

4. The market: buying, selling and trading between collectors

Signing in to the market uses Sign in with Apple, with no password. Our server keeps:

• An id from Apple: a stable number Apple gives the account. We don’t receive your email from it.
• Nickname, city and profile photo: what you chose. Other collectors see them. The nickname can’t include your family name.
• Full name and phone number: required before listing, chatting or trading, so that everyone acting in the market is a real, identifiable person. No other user sees them. We use them only for safety: looking into a report of fraud or abuse, and handing them to the authorities when the law requires it.
• Year of birth, and under 18 your statement that a parent agreed: the market is 13+, and under 18 needs a parent’s permission. Only the year is kept, and no other user sees it.
• Listings: the card, price, condition, and the front and back photos from the live scan. Location and device data are removed from the photos before they are stored.
• Chats: messages, price offers and trades. Phone numbers, emails, links and the names of other apps can’t be sent in chat. Such an attempt isn’t sent, and we keep it to spot repeated attempts to take deals outside the app.
• Deals and reviews: who bought from whom, when, and the review given after a deal.
• Want list: only if you chose to share it, to get matches.
• Reports and blocks: what you reported and whom you blocked.
• Notifications: the phone’s push token, its language and which alerts you turned on.

Who sees what: an active listing is visible to every market user, and on a public web page when it is shared. A chat is visible only to its two sides, and to us when it is reported or when we look into a fraud claim. Your full name and phone are visible only to us.

Why: to run the market, keep it safe (reports, blocks, fraud handling) and send the alerts you turned on.

How long: while the account exists. Delete it inside the app: Market → Account → Delete account. That removes the profile, listings, photos and alerts. One exception: your deals and chats with other collectors, including both sides’ full names and phone numbers, the card, the price and the messages, are kept for 12 more months, separately and accessible only to us, so we can look into a fraud claim even after an account is deleted. After 12 months they are deleted automatically. Server backups are gone within 14 days and the encrypted Drive copy within 90.

Where: our server at Hetzner, with an encrypted backup on Google Drive. The market terms: here.

5. Permissions

• Camera: to recognise a card, check centering, and photograph a listing in a live scan. Recognition photos never leave your phone.
• Photos: only when you pick a photo to recognise, to check centering or to read the meetup code.
• Notifications: target prices, price jumps and the weekly summary are created on the phone itself. Market alerts (a message, an offer, a match, a deal) are sent by our server through Apple, and only if they are on in the notifications screen.
• iCloud: an automatic backup of your binder to your own iCloud, if you turned it on. It stays with Apple in your account, not with us.

6. Sharing

A sale post is made on your phone. It leaves only when you choose to share it, to the app you choose, under that app’s terms.

7. Fair Binder Pro

The subscription is bought and managed through Apple. We don’t receive your payment details, name or email. The app asks Apple, on the phone itself, whether a subscription is active. The free version’s monthly counts are kept on the phone only. Cancel in your Apple ID settings → Subscriptions.

8. Anonymous usage counts and problem reports

Once a day the app sends our server the previous day’s counts: how often it was opened, how many scans, adds and posts there were, which tools were used, and whether Pro is on. With them go a random id made on the phone and linked to nothing about you, the app version, the language, the currency and the binder size in ranges (for example 10-49 cards). No name, cards, prices, photos or location are sent. The server keeps the counts without an IP address. Problem reports: if the app closes on an error or freezes, on the next launch it sends our server a technical report: what the error was and where in the code it happened, the app version, the iOS version, the phone model and the same random id. When iOS itself crashed the app, the report is the one iOS hands to the app. No name, cards, prices, photos or location are sent, and the server keeps the reports for 90 days, without an IP address. Turn both off any time in More → Send usage counts and problem reports; anything not yet sent is deleted.

9. Children

The market is for ages 13 and up; under 18 needs a parent’s permission. Without a market account the app collects no personal data.

10. This website

fairbinder.com sets no cookies of its own and uses no analytics.

11. Changes

If what we collect or why changes, this policy and the store privacy label are updated before that version.

12. Contact