Privacy

What Bartr collects

• Anonymous usage counts, but only if you switch them on. The Share usage analytics switch in Profile is off when you install the app, and nothing is sent until you turn it on yourself. With it on, Bartr sends counts and outcomes only: how often a scan finished, whether an import was reviewed, that sort of thing. They go to PostHog, the analytics service Bartr uses. Never your card photos, your notes, your trades, or what you type into search. Turning the switch back off stops the sending immediately and throws away anything still queued.
• An anonymous list of which cards you own. Once a day the app sends only each card’s internal catalog id and its game. Never your name, your device, your notes, or anything you typed, and it cannot be tied back to you. Bartr uses it to know which cards real collectors actually hold, so price data for those cards stays fresh.
• An anonymous install ID. A random number made when the app is installed. It tells one install apart from another so a count is not double-reported. It is not linked to you, your phone, or any account, and deleting the app ends it.
• Crash and error reports, so a crash can be fixed without you having to describe it. These are always on, and the Share usage analytics switch above does not control them. A report holds the error message, some technical detail, which part of the app it came from, whether you are on iOS or Android, and the app version. No name, no email, no account, no device identifier, no card photos.

What Bartr never collects

• What you paid, the contents of your notes, or what your collection is worth. Those stay on your phone unless you switch on Cloud Backup yourself, which is described under Things you choose to share. The anonymous daily list of card ids described above carries no prices, no quantities, and no notes.
• Your phone number, your contacts, or your location. Bartr never asks for any of those. It does not ask for your real name either, though you can type a display name for yourself if you want one. Email is the exception, and there are exactly two optional boxes: the one on the front page of this site, and the Vendor Desk sign-in link in the app. Both are described below.
• Anything that would identify you, on purpose. Bartr aggregates what is popular to own, never who owns it.

Scans, searches and prices

When you scan a card, the photo is sent to Bartr’s server and to card-identification services so the card can be recognized. Bartr does not keep your photos and does not use them to build a profile of you or for advertising; the identification services process the photo to return a match under their own privacy policies. Please photograph cards, not people.

What you type into search is sent to Bartr’s server and to third-party card catalogs so the card can be found. If a search finds nothing, Bartr may send what you typed to an AI service to work out which card you meant (for example, a nickname like “moonbreon”). If you then tap “Not the card you meant?”, the words you searched for are saved on Bartr’s server so that search can be made to work for everyone. That record is just the search text and the game. It is not linked to you or your device.

To show a price, Bartr sends a card’s name, set, and number to third-party pricing catalogs. Those lookups carry no personal information. If you check a graded slab’s certificate, that certificate number goes to the grading company’s own lookup. Requests to Bartr’s server carry a random device identifier so those shared services stay fair. It is not linked to your name or contact details.

Things you choose to share

Share links, a trade receipt or a vendor list, only exist when you make one. They contain what you put in them. If you would rather not publish something, do not share it.

A published vendor list is removed automatically 30 days after your app last synced it. People opening the page does not keep it up any longer, and you can take it down yourself at any time from the Vendor Desk.

A Collection Showcase, if you publish one, puts a page about your collection on the web, at an address made of random characters that is not listed anywhere. It carries the display name you chose, and for up to 60 of your cards the name, set, collector number, rarity, grade, printing, image, how many copies you have, and an estimated price. It carries counts for the rest. It also shows your collection’s estimated total value, unless you switch that off before you publish. It never carries what you paid, your notes, or your purchase dates. Once a page is live it updates itself whenever your collection or your showcase settings change, so it keeps matching your app until you take it down. Taking it down is one tap, and a page that stops being updated is deleted 90 days later. Bartr asks search engines not to list it, but anyone you send the link to can open it and pass it on.

Asking the Vendor Desk to email you a sign-in link sends your email address to Bartr’s server, which saves it with the answer to the checkbox under it and a random code for the phone that asked. The email carries a one-time link that expires in 15 minutes, never your web key. The checkbox that offers news about new vendor features starts unchecked, and leaving it alone is all it takes to say no. No marketing email has ever been sent. You can delete it yourself at any time: in the Vendor Desk, open Web access and tap Delete My Email Address. If you did not tick that checkbox, Bartr also deletes the address about 90 days after you asked for the link. You can still email support@bartr.cards instead.

Price alerts, if you switch on notifications for them, send your alert rules to Bartr’s server so prices can be watched while your app is closed. A rule is the card’s catalog id and name, the grade, the price you picked, and whether you are watching for a rise or a fall. Turning notifications off deletes them from the server.

Starting a live trade sends the cards you put on the table, any display name you type, and any event label you type to Bartr’s server, so the other person’s phone can see them. An unfinished session expires 8 hours after it is created and stops working at that point; the expired record is deleted within an hour after that. A finished trade’s receipt stays on the server for 90 days so both of you can view it, and is deleted after that. It holds the traded cards and the event label, never your name unless you typed one. A one-way hash of your device identifier is stored with a session so a closed app can rejoin its own side; the raw identifier is never stored.

An event room, when you join one with a code, holds only what you choose to publish into it: the card, its condition and finish, and the generated table name the room assigns you. Never a price, never your location, never the rest of your collection. A regular room expires 14 hours after it was created; leaving the room or taking your lists down removes your cards immediately.

A show room is a room attached to an announced show, so it lives longer: from the moment it is created, at most 14 days before the show starts, until the show ends. A show room closes shortly after the show ends and is deleted within a day. A vendor’s bringing list in a show room can mark a card as for sale, but the room never carries a price. Prices live on the vendor’s public list page.

Cloud Backup, if you switch it on in Profile, uploads a copy of everything the app has stored on your phone. That is more than cards: your collection, trades, want list, saved dealer names, card notes and what you paid, any display name you set, and your app settings. It is stored as ordinary data, not scrambled by your recovery code, so treat a backup like a copy of your app. Switching it off asks the server to delete the copy. It is off until you turn it on.

Share diagnostics automatically, a switch on the Debug Log screen in Profile, is off unless you turn it on. When it is on, a computed summary (timings, budget warnings, credits spent) and the last 100 log lines are sent to Bartr so problems can be traced. Text you type is logged only as a count of its characters, and share links, keys and email addresses are removed before anything leaves your phone. These reports are tied to the random device identifier your app sends.

The email box on this site

The bottom of the front page has a box for an email address. It is there for readers who cannot install Bartr on their phone yet, for example on Android. It is optional, and nothing in the app or on this site depends on it. This is a different list from the Vendor Desk sign-in link described above, and the two are never joined up.

If you use it, Bartr stores three things: the address, that it came from the front page, and the date. It is used to send you one message when there is something worth telling you, such as an Android version or an App Store release. It is never sold, never handed to anyone else, and never used to advertise at you. Separately, like any website, the server sees the network address a request comes from and keeps it in a rate-limit tally for up to 25 hours, apart from the list, so nobody can flood the box.

To come off the list, reply to that message, or email support@bartr.cards from that address or naming it, and the row is deleted.

This website

The reading pages on bartr.cards count visits: which page was opened, roughly where the visit came from, and whether a link or a button was tapped. That is the whole list. It is how a page nobody can find, or a button nobody presses, becomes visible instead of being guessed at.

There is no cookie. Nothing is stored in your browser, which is also why there is no banner asking you to accept anything. The analytics provider, PostHog, counts visitors using a value that is rebuilt from scratch every day, so the same browser cannot be recognised tomorrow, and is never followed onto any other site.

Like any web request, the one your browser makes carries a network address, and the provider uses it to work out an approximate country. Bartr does not store it and does not attach it to anything else.

Some pages are counted and some are not, on purpose. The vendor desk is not, and neither is any share link you open: a trade receipt, a card link, or a collection. Those pages hold someone else’s cards and prices, and they stay out of it entirely.

What the site keeps in your browser. Two tools keep working data on your own device, and only there. The vendor desk keeps its sign-in key, changes waiting to reach your phone, your layout choice, and any private notes you type, in this browser’s storage; Disconnect on the desk removes all of it. A trade you finish together at /trade-guest keeps a seat token for that one trade until the tab closes. A shared vendor list can set one first-party cookie so a buyer’s place in that list survives a reload. None of these follows you anywhere else, and none is read by anyone but you.

Children

Bartr is built to be safe for younger collectors. Because there are no accounts, it does not knowingly collect personal information from anyone, including children.

Asking about any of this

Email support@bartr.cards and a person will answer. If you want the anonymous counts from your install dropped, say so and include nothing else. There is no account to look you up by.

Changes

If what Bartr collects changes, this page changes with it.