Dutch law (art. 11.7a of the Telecommunications Act) lets us store things on your device without asking only when they are strictly necessary to deliver the service you asked for. Everything else needs your consent first. This is the full list of both.
1. Strictly necessary — no consent needed
| What | Where | Why | How long |
|---|---|---|---|
| `bindex_session` | cookie | keeps you signed in; without it every screen would ask for your password | until you sign out, or the session expires |
| `g_oauth` | cookie | protects the Google sign-in flow against request forgery; set only while you sign in | a few minutes |
| Your preferences (`bindex:theme`, `bindex:*-view`, dismissed tips, language) | local storage | the app opens exactly as you left it | until you clear the app or browser storage |
| On-device caches of your collection and the card catalogue (`bindex:list:*` and similar) | local storage | speed, and so the app still shows your collection when the connection drops | until replaced by fresher data, or until you clear storage |
| Security and abuse protection | server-side, tied to the session | keeps accounts and deals safe | see the Privacy Policy §6 |
The on-device card-recognition model also runs locally: a scan is processed on your device and is not uploaded in order to recognise it.
2. Optional — only after you switch it on
- Usage analytics (`bindex:analytics-consent` records your choice): which screens you open and which features you use, so we can see what to improve. Off by default. It runs only after you switch it on in Settings → Privacy & data, and switching it off takes effect immediately. No advertising identifiers, no cross-app tracking.
We ask for consent for analytics even though the Dutch supervisory authority allows a narrow exemption for strictly privacy-friendly analytics. We did not want the exemption to be the thing standing between you and a real choice, so the toggle is the whole answer: off unless you say otherwise.
Analytics is always off for users under 16 and cannot be switched on for them.
We also honour the browser signals. If your browser sends Global Privacy Control or Do Not Track, we do not record analytics events, whatever the toggle says.
3. Never
- No third-party advertising cookies or trackers. Not now, not later without telling you.
- No cross-site or cross-app tracking.
- No selling of data.
4. Managing your choices
Change your analytics choice at any time in Settings → Privacy & data. Strictly necessary storage cannot be switched off, because the service cannot work without it; clearing your browser or app storage removes it, and signs you out.
5. Changes
The version number and the date at the top always reflect the text that applies. A material change is announced in the app and asks you to confirm it before it applies to you.