Privacy Policy

Last updated: July 2026

This policy explains what personal data HitBinder collects, why, and your rights over it. HitBinder is operated by Aroovo Ltd, a company registered in England and Wales, which is the data controller for the data described here.

What we collect

• Account: your email address, chosen handle, and optional display name.
• Location (coarse): the city and the first part of your postcode (e.g. "SW1") if you choose to add them — shown on your public profile. We never store or display your full postcode or address.
• Collection activity: the cards in your binders and wantlist, any eBay listing links you attach to cards you're selling, and an audit log of key actions.
• Photos you upload of cards (e.g. to identify a card by picture).
• Notification settings: email preference, optional Discord webhook URL, and (if you enable it) your browser's web-push subscription.
• Technical: standard server logs (IP address, request metadata) for security and abuse prevention.

HitBinder does not process peer-to-peer trades and does not take payments from you. We don't collect ID documents, card/payment details, or shipping addresses — buying and selling happens on eBay, under eBay's own terms and privacy policy.

Why we use it, and our legal basis

• To provide the service (accounts, collection & wantlist tracking, valuations, notifications) — performance of our contract with you.
• Security and abuse prevention — our legitimate interest in keeping the service safe.
• Optional channels (Discord, web push, any future marketing) — your consent, which you can withdraw any time in Settings.

Who we share it with

We use a small number of processors and never sell your data:

• Hostinger — hosting and transactional email (sign-in links, notifications).
• Discord — only if you choose to connect a webhook for alerts.
• eBay Partner Network — our "buy" and "sell on eBay" links carry an affiliate tag, so eBay may tell us in aggregate that a click led to a purchase. Following a link takes you to eBay, whose own privacy policy then applies; eBay may pay us a small commission at no extra cost to you.
• Other members see your public profile: handle, city (if set), the value of your collection, and any cards you've listed for sale (with their eBay links).

Card catalogue and pricing data come from pokemontcg.io, Scryfall and Scrydex and contain no personal data.

Retention

We keep account data while your account is active. After closure we retain minimal records for a reasonable period to prevent fraud and meet legal obligations, then delete or anonymise them.

Your rights

Under UK GDPR you can request access to, correction of, deletion of, restriction of, or a portable copy of your data, and object to certain processing. Use our contact form to exercise these. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

See our Cookie Policy — we currently use essential cookies only.

Contact

Privacy questions or requests: use our contact form.