TCG Card Scanner
Privacy Policy
Last updated: September 24, 2026
This policy explains what information the TCG Card Scanner iOS app (“TCG Card Scanner”, “we”) processes, why, and your choices. TCG Card Scanner is developed by Arsalan Golestanekh. Questions: golko.apps.support@gmail.com.
In short: no account is required, your collection stays on your device and in your own iCloud, card photos are sent to an AI service only to identify the card, and we never sell your data.
1. Information the app processes
- Card photos. When you scan a card (with the camera or a photo you pick), the image is sent to Google’s Gemini model through Google Firebase AI Logic to identify the card and estimate its condition. We don’t store your photos on our servers. The photo is kept on your device with the card in your collection.
- Your collection. Decks, cards, quantities, prices you enter and history are stored on your device and, if iCloud is enabled for TCG Card Scanner, synced through your private iCloud account (Apple CloudKit). We cannot access this data.
- Card searches and prices. To show prices and listings we send card details (game, name, number, set) — never personal information — to our price data provider JustTCG and to eBay’s search API.
- Smart picks. When you ask for suggestions for a budget, the names, sets and numbers of the cards in that deck, the goal and the amount are sent to Gemini (via Firebase AI Logic) to generate suggestions.
- Shared decks. If you share a deck by link, a snapshot (deck name, game, card names, sets, numbers, conditions, quantities and prices) is uploaded to Google Firebase Cloud Firestore and can be viewed by anyone with the link. It’s linked to an anonymous identifier created by Firebase Authentication, not to your name or email.
- Usage analytics. We use Google Analytics for Firebase and Amplitude to understand how the app is used (for example: screens opened, scans made, purchase screen views, taps on store links) together with device and app information such as app version, device model, OS version, language, country (derived from IP address) and app-generated device and user identifiers.
- Advertising identifier. Only if you allow it in the iOS “Allow Tracking” prompt, the advertising identifier (IDFA) may be used to measure which ads and partner links bring people to TCG Card Scanner. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
- App integrity. Firebase App Check verifies that requests come from the genuine app on a real device (Apple App Attest / DeviceCheck), to protect our services from abuse.
- Purchases. Subscriptions are processed by Apple and managed through RevenueCat, which receives purchase and subscription information (product, price, dates, trial and renewal status, an anonymous app user ID and App Store transaction identifiers) so we can unlock Pro and restore purchases. Neither we nor RevenueCat receive your payment card details.
- Support. If you email us, we receive your email address and whatever you send, and use them only to answer you.
2. Affiliate links
Some links to eBay and TCGplayer are affiliate links (for example through the eBay Partner Network). When you open them, those stores and their affiliate networks may use cookies or similar technologies under their own privacy policies to attribute purchases. We receive reports about commissions, not your personal information.
3. How we use information
- to identify cards, show prices, listings and suggestions, and sync your collection;
- to operate, secure and improve the app and fix problems;
- to provide the Pro subscription and answer support requests;
- to measure the performance of partner links (only with your permission where required).
We do not sell your personal information and do not use it for profiling unrelated to the app.
4. Service providers
We rely on: Google (Firebase AI Logic / Gemini, Cloud Firestore, Authentication, Analytics, Remote Config, App Check, Hosting), Apple (iCloud / CloudKit, App Store purchases), Amplitude (product analytics), RevenueCat (subscription management), JustTCG (card data and prices), eBay (listings) and TCGplayer (store links). Each processes data under its own terms and privacy policy.
5. Retention
Collection data stays until you delete it in the app or delete the app (and from iCloud if synced). Shared deck snapshots stay available until you ask us to remove them. Analytics data is kept according to the retention settings of Google Analytics (up to 14 months) and Amplitude. RevenueCat keeps subscription records as needed to provide purchase restoration and for accounting. Support emails are kept as long as needed to help you.
6. Your choices and rights
- Deny or revoke camera and photo access in iOS Settings — you can still search cards by name.
- Turn off tracking permission in iOS Settings → Privacy & Security → Tracking.
- Delete cards and decks in the app at any time.
- Depending on where you live (for example the EU/UK under the GDPR or California under the CCPA), you may have the right to access, correct, delete or port your data and to object to processing. Email us and we’ll help.
7. Children
TCG Card Scanner is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
8. Security
Data is sent over encrypted connections (HTTPS). Access to our cloud services is protected by App Check and security rules. No method of transmission or storage is 100% secure, but we work to protect your information.
9. Changes
We may update this policy. We will change the “Last updated” date above and, for material changes, notify you in the app.