Privacy policy

This policy explains what personal data Binder Templates collects, for what purpose, for how long, and what rights you have over it. We comply with the European Union's General Data Protection Regulation (GDPR).

1. Who is the data controller

The controller is the owner of Binder Templates. For any query about your personal data, write to antoniooferres@gmail.com.

2. What data we collect and why

• Account: the email and username you give us when you register. We use it to authenticate you, show you your templates and attribute comments. Legal basis: performance of the contract.
• Templates and activity: the templates you create, the votes you cast, the comments you post and the downloads you make. We use it to make the product work. Legal basis: performance of the contract.
• Anonymous analytics (optional): if you accept analytics cookies, we use PostHog (EU-hosted) to record page views, usage events and errors. Legal basis: your consent. You can withdraw it at any time from the banner.
• Technical data: IP address and user-agent when you make requests. Our providers (Vercel, Supabase) process them automatically for security and diagnostics. Legal basis: legitimate interest.

3. Who we share data with

We work with processors that provide us infrastructure. None of them resell your data:

• Supabase — database hosting, auth and image storage. Data stored in the EU.
• Vercel — frontend and API hosting.
• PostHog (eu.i.posthog.com) — product analytics, only if you've accepted.
• Pokémon TCG API and PokeAPI — when you request card information, your browser may contact these public services; we don't send them personal data.
• Google AdSense — we show ads to keep the project free. Google may use cookies to serve ads; see Google's policies. Ads are only personalized if you accept advertising cookies.

4. How long we keep your data

• Account and templates: while your account is active. If you delete it, we remove all your data within 30 days at most.
• Analytics: up to 12 months, then anonymised.
• Technical logs: up to 90 days at the providers.

5. Your rights

You have the right to access, rectify, erase, object to and port your data, as well as to withdraw consent at any time. Write to us at antoniooferres@gmail.com and we'll handle your request within 30 days. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe we process your data improperly.

6. Cookies

We use three categories of cookies / local storage:

• Necessary: the Supabase session (keeps you logged in) and minimal preferences such as your cookie choice or tour progress. No consent required.
• Analytics (optional): PostHog. Loaded only if you explicitly accept. If you decline, the script isn't downloaded and no events are sent.
• Advertising (optional): Google AdSense. Only personalized if you explicitly accept. If you choose “Only necessary”, ads are shown without personalization and without advertising cookies.

You can change your decision by clearing the cookie_consent preference in your browser's localStorage, or by clicking «Necessary only» when the banner reappears.

7. Changes to this policy

If we change this policy, we'll update the date in the header and, if the changes are substantial, we'll notify you by email or on the site itself.

Questions? Write to us at antoniooferres@gmail.com or use the contact form.