Back to 9 Pocket · Terms of use
Privacy
Last updated: 10 October 2026Who runs 9 Pocket
9 Pocket is run by Matthew Buhagiar, Malta. Contact: 9.pocket.binder@gmail.com.
What is stored, and where
- Without signing in (trying the app as a guest, or a copy opened from your own computer): your collection, wishlist, sold log, sealed products and settings are stored only in your own browser or app, on your device. Nothing is sent to us.
- If you sign in with Google: we receive your Google account's name, email address and an account identifier, so we can recognise you. Your collection, wishlist, sold log, sealed products and price history are saved to our database so they appear on your other devices. Only your own account can read or change them.
- If you share a list by link: a copy of that list (card names, sets, numbers, versions, conditions, quantities, and values if you chose to show them) and your first name as its title are stored so that anyone with the link can see it. Stop sharing and the copy is deleted.
- If you ask to be emailed when Plus is ready: we keep that choice with your email address, and use it only for that.
- Card photos you scan are read on your device. They are not uploaded to us.
What we do not do
No advertising, no tracking or analytics, and no selling or sharing of your data with anyone for their own purposes.
Services we rely on
- Google Firebase (Google Ireland Limited / Google LLC) provides the sign-in and stores the data of signed-in users.
- Google Forms (Google Ireland Limited / Google LLC) receives messages you send through the feedback form and stores them in a spreadsheet only we can see. It receives what you type, the email address you give (if any), your name if you are signed in, and the page, build, plan and type of device sent with it.
- Cloudflare (Cloudflare, Inc.) hosts the site and its address, 9pocketbinder.com, and, like any web host, sees your IP address when you load it.
- Card pictures, set images, fonts and the text reader used for scanning are loaded from public services (images.pokemontcg.io, assets.tcgdex.net, Google Fonts, jsDelivr), and price checks and the dollar exchange rate come from api.tcgdex.net and Frankfurter (api.frankfurter.app). Those services see your IP address when your device requests something from them. Nothing about you or your collection is sent with these requests.
How long data is kept
Data of signed-in users is kept until you delete your account. Data stored only on your device stays until you clear it.
Deleting your account and data
In the app, press your name in the header, then Delete my account, and press again to confirm. This removes your account and the collection saved with it from our servers straight away. You can also email 9.pocket.binder@gmail.com from the address you signed in with and we will delete it within 30 days. The copy on your own device is yours to keep or clear.
Your rights
If you are in the EU or UK you can ask for a copy of your data, have it corrected or deleted, and complain to your data protection authority. In the app, Export backup gives you a full copy of your data at any time.
Children
Signing in is not intended for children under 13, the age from which Malta lets children agree to online services themselves. The app can be used without signing in.
Not affiliated
9 Pocket is an unofficial fan project. It is not affiliated with, endorsed or sponsored by Nintendo, Creatures, GAME FREAK or The Pokémon Company. Card names and images belong to their owners.
Changes
If this page changes, the date at the top changes with it.