Privacy

What Bartr collects

• Anonymous daily counts, on by default. The app sends Bartr’s server anonymous daily counts of how scans end (matched, picked from a list, typed by hand, not read, or marked as the wrong card) and of how often the app is opened, first-run setup is shown and finished, a first card is scanned, a trade check shows its verdict, trades are saved or shared, receipts are shared, the Bartr Pro screen is opened, a Pro purchase is started, finished or does not go through, a Show Pass is bought, Show Mode is started and searches are run, each kept only as a daily total with no identifier: no account, no device ID, no install ID, nothing about you or your cards. These anonymous counts are on by default and can be turned off in Settings, with the Share anonymous counts switch in Profile.
• Usage analytics, but only if you switch them on. The Share usage analytics switch in Profile is off when you install the app, and nothing is sent until you turn it on yourself. With it on, Bartr sends counts and outcomes only: how often a scan finished, whether an import was reviewed, that sort of thing. They go to the analytics service Bartr uses. Never your card photos, your notes, your trades, or what you type into search. On iPhone, the app also asks Apple once whether an Apple ad in the App Store led to the install. Apple answers with ad campaign and keyword numbers, never who you are, and Bartr does not use the advertising identifier or track you. That answer is sent with the usage counts only while the switch is on. Turning the switch back off stops the sending immediately and throws away anything still queued.
• An anonymous list of which cards you own. Once a day the app sends only each card’s internal catalog id and its game. Never your name, your device, your notes, or anything you typed, and it cannot be tied back to you. Bartr uses it to know which cards real collectors actually hold, so price data for those cards stays fresh.
• An anonymous install ID. A random number made when the app is installed. It tells one install apart from another so a count is not double-reported. It is sent only with usage analytics, never with the anonymous daily counts. It is not linked to you, your phone, or any account, and deleting the app ends it.
• Crash and error reports, so a crash can be fixed without you having to describe it. These are always on, and the Share usage analytics switch above does not control them. A report holds the error message, some technical detail, which part of the app it came from, whether you are on iOS or Android, and the app version. No name, no email, no account, no device identifier, no card photos.

What Bartr never collects

• What you paid, the contents of your notes, or what your collection is worth. Those stay on your phone unless you switch on Cloud Backup yourself, which is described under Things you choose to share. The anonymous daily list of card ids described above carries no prices, no quantities, and no notes.
• Your phone number, your contacts, or your location. Bartr never asks for any of those. It does not ask for your real name either, though you can type a display name for yourself if you want one. Email is the exception, and there are exactly two optional boxes: the one on the front page of this site, and the Vendor Desk sign-in link in the app. Both are described below.
• Anything that would identify you, on purpose. Bartr aggregates what is popular to own, never who owns it.

Scans, searches and prices

When you scan a card, the photo is sent to Bartr’s server and to card-identification services, which can include an AI service, so the card can be recognized. Bartr does not keep your photos and does not use them to build a profile of you or for advertising; the identification services process the photo to return a match under their own privacy policies. Please photograph cards, not people.

What you type into search is sent to Bartr’s server and to third-party card catalogs so the card can be found. If a search finds nothing, Bartr may send what you typed to an AI service to work out which card you meant (for example, a nickname like “moonbreon”). If you then tap “Not the card you meant?”, the words you searched for are saved on Bartr’s server so that search can be made to work for everyone. That record is just the search text and the game. It is not linked to you or your device.

To show a price, Bartr sends a card’s name, set, and number to third-party pricing catalogs. Those lookups carry no personal information. If you check a graded slab’s certificate, that certificate number goes to the grading company’s own lookup. Requests to Bartr’s server carry a random device identifier so those shared services stay fair. It is not linked to your name or contact details.

Things you choose to share

Share links, a trade receipt or a vendor list, only exist when you make one. They contain what you put in them. If you would rather not publish something, do not share it.

A published vendor list is removed automatically 30 days after your app last synced it. People opening the page does not keep it up any longer, and you can take it down yourself at any time from the Vendor Desk.

A Collection Showcase, if you publish one, puts a page about your collection on the web, at an address made of random characters that is not listed anywhere. It carries the display name you chose, and for up to 60 of your cards the name, set, collector number, rarity, grade, printing, image, how many copies you have, and an estimated price. It carries counts for the rest. It also shows your collection’s estimated total value, unless you switch that off before you publish. It never carries what you paid, your notes, or your purchase dates. Once a page is live it updates itself whenever your collection or your showcase settings change, so it keeps matching your app until you take it down. Taking it down is one tap, and a page that stops being updated is deleted 90 days later. Bartr asks search engines not to list it, but anyone you send the link to can open it and pass it on, unless you set a page code. Then a visitor also needs the code, and Bartr’s server keeps only a scrambled form of it that cannot be turned back into the code.

Asking the Vendor Desk to email you a sign-in link sends your email address to Bartr’s server, which saves it with the answer to the checkbox under it and a random code for the phone that asked. The email carries a one-time link that expires in 15 minutes, never your web key. The checkbox that offers news about new vendor features starts unchecked, and leaving it alone is all it takes to say no. No marketing email has ever been sent. You can delete it yourself at any time: in the Vendor Desk, open Web access and tap Delete my email address. If you did not tick that checkbox, Bartr also deletes the address about 90 days after you asked for the link. You can still email support@bartr.cards instead.

Price alerts, if you switch on notifications for them, send your alert rules to Bartr’s server so prices can be watched while your app is closed. A rule is the card’s catalog id and name, the grade, the price you picked, and whether you are watching for a rise or a fall. Turning notifications off deletes them from the server.

Starting a live trade sends the cards you put on the table, any display name you type, and any event label you type to Bartr’s server, so the other person’s phone can see them. An unfinished session expires 8 hours after it is created and stops working at that point; the expired record is deleted within an hour after that. A finished trade’s receipt stays on the server for 90 days so both of you can view it, and is deleted after that. It holds the traded cards and the event label, never your name unless you typed one. A one-way hash of your device identifier is stored with a session so a closed app can rejoin its own side; the raw identifier is never stored.

An event room, when you join one with a code, holds only what you choose to publish into it: the card, its condition and finish, and the generated table name the room assigns you. Never a price, never your location, never the rest of your collection. A regular room expires 14 hours after it was created; leaving the room or taking your lists down removes your cards immediately.

A show room is a room attached to an announced show, so it lives longer: from the moment it is created, at most 14 days before the show starts, until the show ends. A show room closes shortly after the show ends and is deleted within a day. A vendor’s bringing list in a show room can mark a card as for sale, but the room never carries a price. Prices live on the vendor’s public list page.

Cloud Backup, if you switch it on in Profile, uploads a copy of everything the app has stored on your phone. That is more than cards: your collection, trades, want list, saved dealer names, card notes and what you paid, any display name you set, and your app settings. Before it leaves your phone it is scrambled (encrypted) with a key made from your recovery code; the server keeps only the scrambled copy under a lookup id that cannot be turned back into the code, and it does not keep the code it created for you, so nobody, Bartr included, can read a backup without the code. Switching it off asks the server to delete the copy. It is off until you turn it on.

Share diagnostics automatically, a switch on the Debug Log screen in Profile, is off unless you turn it on. When it is on, a computed summary (timings, budget warnings, credits spent) and the last 100 log lines are sent to Bartr so problems can be traced. Text you type is logged only as a count of its characters, and share links, keys and email addresses are removed before anything leaves your phone. These reports are tied to the random device identifier your app sends.

Purchases

There is nothing to buy in Bartr. The app sells no subscription and nothing else, and it does not contact a purchase service, so no purchase information about you exists.

The email box on this site

The bottom of the front page has a box for an email address. It is there for readers who cannot install Bartr on their phone yet, for example on Android. It is optional, and nothing in the app or on this site depends on it. This is a different list from the Vendor Desk sign-in link described above, and the two are never joined up.

If you use it, Bartr stores three things: the address, that it came from the front page, and the date. It is used to send you one message when there is something worth telling you, such as an Android version. It is never sold, never handed to anyone else, and never used to advertise at you. Separately, like any website, the server sees the network address a request comes from and keeps it in a rate-limit tally for up to 25 hours, apart from the list, so nobody can flood the box.

To come off the list, reply to that message, or email support@bartr.cards from that address or naming it, and the row is deleted.

This website

The reading pages on bartr.cards, the price pages and the printable show tools count visits: which page was opened, roughly where the visit came from, and whether a link or a button was tapped. That is the whole list. Nothing you type into a page is sent. It is how a page nobody can find, or a button nobody presses, becomes visible instead of being guessed at.

The website also uses Plausible, a cookieless, privacy-friendly analytics service that counts page visits without cookies or personal identifiers.

There is no cookie. Nothing is stored in your browser, which is also why there is no banner asking you to accept anything. Each analytics provider counts visitors using a value that is rebuilt from scratch every day, so the same browser cannot be recognised tomorrow, and is never followed onto any other site.

Like any web request, the one your browser makes carries a network address, and each provider uses it to work out an approximate country. Bartr does not store it and does not attach it to anything else.

Some pages are counted and some are not, on purpose. The vendor desk is not, and neither is any share link you open: a trade receipt, a card link, or a collection. Those pages hold someone else’s cards and prices, and they stay out of it entirely.

What the site keeps in your browser. Two tools keep working data on your own device, and only there. The vendor desk keeps its sign-in key, changes waiting to reach your phone, your layout choice, and any private notes you type, in this browser’s storage; Disconnect on the desk removes all of it. A trade you finish together at /trade-guest keeps a seat token for that one trade until the tab closes. A shared vendor list can set one first-party cookie so a buyer’s place in that list survives a reload. A collection page with a page code sets one first-party cookie when you enter the right code, so that browser doesn’t ask again for 7 days. None of these follows you anywhere else, and none is read by anyone but you.

Children

Bartr is built to be safe for younger collectors. Because there are no accounts, it does not knowingly collect personal information from anyone, including children.

Asking about any of this

Email support@bartr.cards and a person will answer. If you want the anonymous counts from your install dropped, say so and include nothing else. There is no account to look you up by.

Changes

If what Bartr collects changes, this page changes with it.