SpellScan Privacy Policy

Information SpellScan handles

• Camera captures and recognized text. Camera images are used to identify card titles. Text recognition runs on device. SpellScan writes a temporary capture to app cache and deletes it after recognition, whether recognition succeeds or fails. Camera images and recognized text are not sent to Google by ML Kit.
• ML Kit diagnostics. Google ML Kit may send limited SDK diagnostics and usage metrics to Google, including device and app information, per-installation identifiers, performance metrics, API configuration, feature event types, and error codes. Google states this data is encrypted in transit and is not shared with third parties.
• Scryfall requests. Card names and Scryfall card identifiers are sent to Scryfall over HTTPS to retrieve card metadata, artwork, legality, and price snapshots. Scryfall receives normal network information, such as IP address and browser or WebView request information, under its own policies.
• Advertising. SpellScan uses Google Mobile Ads to display a small banner. The SDK automatically collects and shares IP address, app interactions, diagnostics, and device or account identifiers for advertising, analytics, and fraud prevention. IP address may be used to estimate general location. SpellScan requests non-personalized ads, limits ad content to a General rating, and uses Google's consent and privacy-option controls where required.
• Optional tips. The support page may open a Stripe-hosted payment page. SpellScan does not process card or bank details. Stripe receives information you submit plus ordinary network and transaction information under Stripe's Privacy Policy. The developer may receive the tip amount, account name or identifier supplied by Stripe, and transaction records needed for support, accounting, fraud prevention, and legal compliance.
• Remove Ads purchase. An optional one-time Remove Ads purchase is processed by Google Play. Google handles payment details and supplies SpellScan with product ownership, purchase state, and a purchase token so the app can grant and restore the ad-free entitlement. SpellScan currently checks this information directly with Google Play and does not send it to a developer-operated server.
• Local app data. Collection, decks, scan history, cached card metadata, settings, and life-counter state are stored locally on device. SpellScan disables Android cloud backup for app data.
• Support messages. If you contact the developer, the developer receives the information included in your message and uses it to answer or resolve the request.

Accounts, advertising, and analytics summary

SpellScan does not require an account, operate its own analytics service, or sell personal information. Google Mobile Ads collects and shares the data described above. SpellScan does not provide donor-only features, content, badges, or preferential treatment. Remove Ads is a separate Google Play purchase rather than a tip.

Why information is handled

Information is handled only to provide card recognition and lookup, maintain user-selected app data and settings, display and measure ads, prevent advertising fraud, process optional tips through a provider, confirm and restore a Remove Ads purchase, diagnose SDK failures, answer support requests, protect service reliability, and comply with law.

Third-party services

• Google ML Kit provides on-device text recognition and limited SDK diagnostics. See Google's privacy policy.
• Google Mobile Ads and User Messaging Platform provide banner advertising and privacy choices. See Google's privacy policy and Mobile Ads data disclosure.
• Google Play Billing processes the optional Remove Ads purchase and restores ownership. See Google's privacy policy and Google Play Terms of Service.
• Scryfall provides card data, images, legality, and price snapshots. See Scryfall API documentation and Scryfall FAQs.
• Stripe processes optional-tip payments under Stripe's Privacy Policy.

Those providers control information they independently receive and may retain it under their own policies.

Retention, backup, and deletion

• Temporary camera captures remain only until the recognition attempt ends, then SpellScan deletes them from app cache.
• Local collection, deck, scan, settings, and life-counter data remains until you remove it, clear SpellScan storage in Android settings, or uninstall the app.
• Exported JSON backups remain wherever you save or share them until you delete them.
• Support messages remain as needed to answer the request, maintain support records, or meet legal obligations.
• Tip transaction and accounting records remain as required for support, fraud prevention, tax, and legal obligations.
• Google Play determines retention for Remove Ads transaction records. SpellScan requests current ownership when the app launches.
• Google, Scryfall, and Stripe determine retention for information they receive.

Users may export a SpellScan JSON backup from Settings. Restoring a backup replaces matching SpellScan data on device. Users can remove individual cards, clear scan history, or erase all app data through Android settings or uninstall.

Security

SpellScan uses Android app storage, disables Android cloud backup, and uses HTTPS for Scryfall requests. No storage or transmission method is completely secure.

Permissions

• Camera: capture cards for on-device recognition.
• Internet: retrieve Scryfall card data and prices.

Privacy choices and requests

Most SpellScan data is local and can be controlled directly in the app or Android settings. Where required, Settings provides an Ad privacy choices entry point managed by Google. Android advertising-ID controls are available in device settings. Where applicable, you may request access, correction, deletion, restriction, or information about developer-held personal information by contacting the developer. Because SpellScan has no accounts or server-side collection database, the developer usually cannot identify or retrieve local app data.

Children

SpellScan is not directed to children under 13 and does not knowingly collect personal information from children under 13. If you believe a child supplied personal information through a support message, contact the developer to request deletion.

International use

SpellScan is operated from the United States. Third-party service providers may process network or diagnostic information in other countries under their policies and applicable safeguards.

Changes

Policy changes will update the last-updated date and be published with an app release or on the public policy page. Material changes will receive reasonable notice where required.

Contact

Questions or privacy requests: Spellscan@proton.me