DeckVault Privacy Policy

Last updated: 23 July 2026

This policy explains what personal information DeckVault (“we”, “us”) collects when you use the DeckVault mobile app and backend service, why we collect it, who we share it with, and the choices you have. We’ve written it in plain language. If anything is unclear, contact us at support@deckvault.cc.

1. Information you give us

When you create an account and use the app, we collect and store:

Account details: your email address, your chosen handle (username), and your display name. Your handle and display name are shown publicly; your email address is not shown to other users.
Profile content: anything you choose to add to your profile, such as a short bio and an avatar photo. Avatar uploads are decoded, resized, and re-encoded to remove embedded metadata before they are published.
Collection, deck, and showcase content: the cards you add to your collection (including quantity, condition, grade, acquisition cost, and notes), the decks you build, and the showcases you publish. Showcases and public decks you mark as public are visible to other users; private collections, decks, and notes are not.
Card photos you upload: when you scan a card, the image you capture or upload is sent to our service to be matched against the card catalog and is stored so you can review your scan history.
Social activity: who you follow, and the activity that generates (for example, adding a card or publishing a showcase), which appears in your followers’ feeds.

2. Information collected automatically

To operate the service securely we process limited technical data, including your device’s IP address (used to apply rate limits and prevent abuse) and basic request logs. We use authentication tokens stored on your device to keep you signed in.

3. How we use your information

To provide the core features: cataloguing, valuation, decks, showcases, and the social feed.
To match uploaded card photos against our catalog and return candidate results.
To secure the service — authenticating you, enforcing rate limits, and detecting abuse.
To respond to your support requests and enforce our Terms of Service.

Card price figures shown in the app are estimates for informational purposes only and are not financial advice.

4. Third-party processors

We keep third-party data sharing to a minimum. The processors below are engaged only when the operator of this instance has enabled the corresponding feature; when a feature is turned off, no data is sent to that processor.

Processor	Purpose	Engaged when
Google AdMob	Serves banner and interstitial ads to free users; processes advertising identifiers, IP address, and ad-interaction data (see “Advertising and personalised ads” below).	Ads are enabled and you are not a subscriber.
RevenueCat	Manages DeckVault Pro subscriptions and purchase receipts.	Subscriptions are configured and you start or restore a purchase.
Stripe	Processes marketplace payments and seller payouts (buyer/seller and transaction data).	The marketplace is enabled with real payments and you buy, sell, or onboard as a seller.
Ximilar	Receives a card photo to identify candidate trading cards.	Recognition uploads and the Ximilar matcher are both enabled and you submit a scan.
Sentry	Receives error and diagnostic reports so we can fix crashes.	Error monitoring is configured for this instance.

Each of these providers processes data under its own privacy policy. We also rely on card-data providers (such as Scryfall and pokemontcg.io) for the public card catalog; those requests do not include your personal information.

5. Advertising and personalised ads

Free accounts see ads served by Google AdMob. Depending on your region and your choices, those ads are personalised or non-personalised:

To serve and measure ads, Google may process your device’s advertising identifier, your IP address (which indicates an approximate location), and information about how you interact with the ads shown.
In the European Economic Area and the United Kingdom you are asked for consent before the first ad is shown. If you decline, ads remain non-personalised.
On iOS, personalised ads additionally require your permission via Apple’s App Tracking Transparency prompt; declining keeps ads non-personalised.
You can change or withdraw your consent at any time from the app’s Settings (a privacy-options control is shown where it applies to you), and you can reset or delete your device’s advertising ID in your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Tracking).
Subscribing to DeckVault Pro removes ads entirely.

For more on Google’s processing, see how Google uses information from apps that use its services and Google’s privacy policy.

6. How long we keep your data

We keep your account information and content for as long as your account exists. Uploaded scan images are retained so you can review your scan history. Avatar and scan images are removed when you delete your account; if object storage is unavailable, deletion reports an error so you can retry rather than claiming the files were removed. Security and request logs are kept for a limited period for abuse prevention and then discarded.

6. Deleting your account

You can delete your account at any time from within the app (Settings → Delete account). Deletion is permanent: it removes your account and the content you own — collection items, decks, showcases, listings, orders, ratings, trades, price alerts, notifications, scan images, activity, and follow relationships, together with uploaded avatar and scan images. External payment providers may retain transaction or payout records under their own legal obligations.

7. Your choices

You can edit your profile, and make decks and showcases public or private, at any time.
You can subscribe to DeckVault Pro to remove ads.
You can delete your account as described above.
To request a copy of your data or ask a privacy question, email us.

8. Children

DeckVault is not directed to children under the age required by your local law to consent to data processing, and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this policy as the service evolves. When we make material changes we will update the “last updated” date above and, where appropriate, notify you in the app.

10. Contact

Questions about privacy? Email support@deckvault.cc.

Trademarks and non-affiliation

DeckVault is an independent application and is not affiliated with, endorsed, sponsored, or approved by Wizards of the Coast LLC or by The Pokémon Company, Nintendo, Creatures Inc., or GAME FREAK inc. Magic: The Gathering and Pokémon, and their respective logos, card names, and imagery, are trademarks of their respective owners. Card data and imagery are provided by community-maintained databases (Scryfall for Magic: The Gathering; the Pokémon TCG API for Pokémon) and are used under those providers’ usage guidelines.