Privacy, cookies and terms
Version 25 October 2026 · The Dutch pages are the primary text.
Privacy
In short: no accounts, no database, no advertising, no cookies. Visitor statistics use cookieless Cloudflare Web Analytics, which is skipped when your browser sends Do Not Track or Global Privacy Control. Your collection stays on your own device; photos and recognised text stay in your browser. Your browser does connect to the external services below to load the site, card images, card details and the scanner, and those services see your IP address.
Who is responsible?
Bindtopia is a free, open-source, non-profit fan project with no revenue model. It is run by a private individual: the owner of the GitHub account 7ucardie (“the operator”). There is no company and no paid service. Costs (such as the domain name) are covered by the operator; nothing is sold and there are no ads, paid features or affiliate links. Anyone who wants to support the project can do so voluntarily via GitHub Sponsors; this is never required and unlocks nothing.
Contact: via Bindtopia’s GitHub Issues. Do not post personal data in a public issue; ask for contact there and a private channel will be arranged. Report security issues as described in SECURITY.md.
What data, why and how long
- Saved cards (card ID, name, language, set, image URL): only in your browser’s localStorage, never sent to the operator; kept until you clear them.
- Chosen or camera photo and recognised text: processed locally in page memory, never uploaded; on a computer the live webcam view is shown locally only, never recorded, and the camera turns off after the photo or on cancel; gone when you clear the scan or close the page.
- Searches and filters: page memory only; a price link you open contains the card name.
- IP address, requested URLs, time, browser data: processed by the hosting and external services to deliver and secure files, under their own retention policies. The operator has no access to these logs.
- Visitor statistics (page visited, referrer, browser, OS, device type, country derived from IP, load times): via Cloudflare Web Analytics without cookies or profiles, to understand and improve use; the operator sees aggregated figures only.
- Exported backups: a file you download and control yourself.
Legal basis
Bindtopia has no server, accounts or database of its own. Hosting logs and visitor statistics rely on legitimate interest (Art. 6(1)(f) GDPR): providing a secure, working website and understanding its use. Statistics are privacy-friendly: no cookies, no identification or profiles, and off under Do Not Track or Global Privacy Control; a content blocker also works as an objection. There is no profiling, automated decision-making or sharing for marketing.
External services
- Hosting – GitHub Pages (GitHub, Inc., USA, a Microsoft company). GitHub logs visitor IP addresses for security purposes; see GitHub Pages data collection and the GitHub Privacy Statement. The bindtopia.com domain points to this hosting.
- Statistics – Cloudflare Web Analytics (Cloudflare, Inc., USA): a script from static.cloudflareinsights.com sends a measurement to cloudflareinsights.com, without cookies or fingerprinting; see what Web Analytics measures and the Cloudflare Privacy Policy.
- TCGdex (open-source card database): card images and set logos from assets.tcgdex.net; card details, indicative market prices (originating from Cardmarket and TCGplayer) and non-English catalogs from api.tcgdex.net. “Translate card text” requests the same card again in your interface language. A URL can reveal which card you view. The English base index is served from our own hosting.
- Scanner: only after you choose a photo, Tesseract.js and its runtime are downloaded from cdn.jsdelivr.net and language files from tessdata.projectnaptha.com. These servers receive download requests, not your photo or text. The main script is loaded with subresource integrity.
- Price links: Cardmarket, TCGplayer and eBay receive nothing until you open their link. For a card without an image you can open a Google Images search; Google receives nothing until you open that link. There are no embedded widgets.
Fonts are self-hosted (no Google Fonts); our own requests send no cookies or referrer; no social-media or advertising scripts are loaded.
Voluntary sponsoring
The sponsor link opens GitHub Sponsors only when clicked; there is no embedded payment widget. GitHub and its payment providers process any account and payment data under their own terms. Depending on your visibility settings the operator may see your username and amount, used only to acknowledge your support.
Transfers outside the EEA and security
GitHub, Cloudflare and the CDNs may process data outside the European Economic Area, including the United States, relying on their own safeguards such as the EU-U.S. Data Privacy Framework and standard contractual clauses; see their privacy statements. The site is HTTPS-only, scans are processed locally and there is no server database.
Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection. Because the operator receives and stores no data about you, you exercise most of them yourself by exporting or clearing your local collection. For data held by GitHub, Cloudflare, TCGdex or other services, contact that party. Questions via the contact above are answered within one month. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local authority.
Children and changes
Bindtopia asks for no personal data and has no accounts or payments. This statement is updated before any change to hosting, external services or data processing.
Terms of use
Bindtopia is a free, open-source, non-commercial fan catalog for discovering, identifying and locally saving trading cards. It has no revenue model: nothing is sold and there are no subscriptions, ads, paid features or affiliate links; costs are covered. Voluntary support via GitHub Sponsors is welcome but unlocks nothing. It does not broker transactions.
No rights can be derived from Bindtopia’s content. Card data, images, price indications, translations and recognition results are provided “as is”, without any warranty, and may be incomplete, outdated or wrong. A scan gives suggestions, not proof of authenticity, condition, print variant or value. Price indications come from TCGdex (Cardmarket, TCGplayer), are not offers, appraisals or investment advice, and may differ from current market prices. The service may change or stop without notice.
Saved cards live only in your browser; export a backup. Use the service for personal, non-commercial purposes and do not disrupt it. Bindtopia is an independent fan project, not affiliated with, sponsored or endorsed by The Pokémon Company, Nintendo, Creatures or GAME FREAK; Pokémon and card artwork belong to their owners. The MIT license covers only Bindtopia’s own code and design.
To the extent permitted by law, the operator is not liable for damage from using or relying on the service, including incorrect card or price information, incorrect recognition, outages of external services or loss of locally stored data; liability that cannot legally be excluded remains. Dutch law applies, without limiting mandatory consumer protection.
Rights and contact
Bindtopia is a free, open-source, non-profit fan project with no revenue model. It is run by a private individual: the owner of the GitHub account 7ucardie (“the operator”). There is no company and no paid service. Costs (such as the domain name) are covered by the operator; nothing is sold and there are no ads, paid features or affiliate links. Anyone who wants to support the project can do so voluntarily via GitHub Sponsors; this is never required and unlocks nothing.
Contact: via Bindtopia’s GitHub Issues. Do not post personal data in a public issue; ask for contact there and a private channel will be arranged. Report security issues as described in SECURITY.md.
Card data: TCGdex (MIT license). Card images are loaded externally and remain the property of their owners; they are shown only to identify cards in a non-commercial fan project. Scanner: Tesseract.js (Apache-2.0). Price links contain no affiliate codes.
Rights holders can report suspected infringement via the contact above, stating the page or card ID, the work or right concerned and how to reach them. Valid reports are handled promptly by removing or blocking the material.