Pokémon Binder Finder

🔒

Before you sign in

To save your Pokémon collection across devices, creating an account requires storing the following data from your Google profile:

• Your Google display name
• Your email address
• Which Pokémon you mark as owned
• Your Google profile picture URL

By continuing you agree to our terms and acknowledge our privacy notice. You can erase all your data at any time from your profile.

Privacy Policy

Data Controller

ptcg.senakhten.re — personal, non-commercial project operated by a private individual in Germany.
Contact for data requests: privacy@ptcg.senakhten.re

What We Store

When you create an account we store from your Google profile: display name, email address, profile picture URL, and which Pokédex numbers you mark as owned. We also store your account creation timestamp and last login timestamp.

Our web server produces standard access logs (IP address, requested URL, timestamp) for security purposes. These are not linked to your account.

Purpose & Legal Basis

Your name, email, picture, and collection are processed under Art. 6(1)(b) GDPR — necessary for the performance of the account service you requested. Server access logs are processed under Art. 6(1)(f) GDPR — legitimate interest in the security and integrity of this service.

Data Retention

Account data is kept until you delete your account — the Delete my account & data button in your profile erases everything immediately and permanently. Server access logs are retained per our hosting provider’s standard log rotation policy (typically 7–30 days).

Third-Party Recipients

The following external services may receive data from your browser or our server:
• Google (Sign-In / OAuth) — your browser contacts Google’s authentication servers when you sign in. Google acts as an independent controller. Google Privacy Policy
• Google (Gemini API) — card photos are sent from our server to Google’s Gemini API for identification when you use the scanner. Google Cloud Privacy
• jsDelivr CDN — your IP is transmitted when downloading the Visual AI model. jsDelivr Privacy Policy
• PokéAPI (beta.pokeapi.co) — your IP is transmitted when the Pokémon database is downloaded on first use. PokéAPI
• GitHub (raw.githubusercontent.com) — your IP is transmitted when loading card sprites. GitHub Privacy Statement

No personal data is sold, shared for advertising, or transferred to any other party.

Your Rights

• Access (Art. 15) — request a copy of all data held about you within one month. Use Download my data in your profile or email privacy@ptcg.senakhten.re.
• Rectification (Art. 16) — your name and email come from Google; updating them in your Google account re-syncs them here on next login.
• Erasure (Art. 17) — use Delete my account & data in your profile to erase everything immediately.
• Restriction (Art. 18) — contact privacy@ptcg.senakhten.re.
• Portability (Art. 20) — use Download my data in your profile to receive your data as a JSON file.
• Object (Art. 21) — to legitimate-interest processing (server logs): contact privacy@ptcg.senakhten.re.
• Complaint (Art. 77) — you may lodge a complaint with the competent supervisory authority: BfDI, Husarenstraße 30, 53117 Bonn, Germany.

Cookies & Local Storage

bf_sess (session cookie) — strictly necessary to keep you logged in. Exempt from consent under §25(2) TDDDG. Expires after 30 days or on sign-out. Secure, HttpOnly, SameSite=Strict.

ptcg_db_v2 (localStorage) — the Pokémon name database cached on your device. Contains no personal data.
gdpr_v1 (localStorage) — records that you have seen this privacy notice.

The PWA service worker caches app shell files (HTML, JavaScript, icons) on your device for offline use. No personal data is included in this cache.

—

Binder Settings

Total card slots

Grid per page

×

Pokémon Binder Finder

Loading Pokémon database…

Could not load database

—