SpellScan Privacy Policy

Information SpellScan handles

• Camera captures and recognized text. Camera images are used to identify card titles. Text recognition runs on device. SpellScan writes a temporary capture to app cache and deletes it after recognition. Camera images and recognized text are not sent to Google by ML Kit.
• ML Kit diagnostics. Google ML Kit may send limited SDK diagnostics and usage metrics to Google, including device and app information, per-installation identifiers, performance metrics, API configuration, feature event types, and error codes.
• Scryfall requests. Card names and Scryfall card identifiers are sent to Scryfall over HTTPS to retrieve card metadata, artwork, legality, and price snapshots. Scryfall receives normal network information, such as IP address and browser or WebView request information, under its own policies.
• Advertising. SpellScan uses Google Mobile Ads to display a small banner. The SDK automatically collects and shares IP address, app interactions, diagnostics, and device or account identifiers for advertising, analytics, and fraud prevention. SpellScan requests non-personalized ads, limits ad content to a General rating, and uses Google's consent and privacy-option controls where required.
• Remove Ads purchase. An optional one-time Remove Ads purchase is processed by Google Play. Google handles payment details and supplies SpellScan with product ownership, purchase state, and a purchase token so the app can grant and restore the ad-free entitlement.
• Local app data. Collection, decks, scan history, cached card metadata, settings, and life-counter state are stored locally on device. SpellScan disables Android cloud backup for app data.
• Support messages. If you contact the developer, the developer receives the information included in your message and uses it to answer or resolve the request.

Accounts, advertising, and analytics summary

SpellScan does not require an account, operate its own analytics service, or sell personal information. Google Mobile Ads collects and shares the data described above. SpellScan does not provide donor-only features, content, badges, or preferential treatment. Remove Ads is a separate Google Play purchase.

Why information is handled

Information is handled only to provide card recognition and lookup, maintain user-selected app data and settings, display and measure ads, prevent advertising fraud, confirm and restore a Remove Ads purchase, diagnose SDK failures, answer support requests, protect service reliability, and comply with law.

Third-party services

• Google ML Kit provides on-device text recognition and limited SDK diagnostics. See Google's privacy policy.
• Google Mobile Ads and User Messaging Platform provide banner advertising and privacy choices. See Google's privacy policy and Mobile Ads data disclosure.
• Google Play Billing processes the optional Remove Ads purchase and restores ownership. See Google's privacy policy and Google Play Terms of Service.
• Scryfall provides card data, images, legality, and price snapshots. See Scryfall API documentation and Scryfall FAQs.

Retention, backup, and deletion

• Temporary camera captures remain only until the recognition attempt ends, then SpellScan deletes them from app cache.
• Local collection, deck, scan, settings, and life-counter data remains until you remove it, clear SpellScan storage in Android settings, or uninstall the app.
• Exported JSON backups remain wherever you save or share them until you delete them.
• Support messages remain as needed to answer the request, maintain support records, or meet legal obligations.
• Google and Scryfall determine retention for information they receive.

Security, permissions, and choices

• SpellScan uses Android app storage, disables Android cloud backup, and uses HTTPS for Scryfall requests.
• Camera permission is used only after the user starts card scanning.
• Internet access is used to retrieve Scryfall card data, ads, consent messages, and purchase state.
• Users can export backups, remove cards, clear scan history, erase app data through Android settings, uninstall SpellScan, or contact support for privacy questions.

Children, international use, and changes

SpellScan is not directed to children under 13 and does not knowingly collect personal information from children under 13. SpellScan is operated from the United States. Policy changes will update the last-updated date and be published with an app release or on this page.

Contact

Questions or privacy requests: Spellscan@proton.me