Privacy Policy · Last updated 5 October 2026
Almost nothing, and none of it reaches us. There is no CardCapture server. No analytics, no tracking, no advertising identifier, and no third-party SDK that phones home. This page explains exactly what the app stores, what it sends, and where it goes.
Your collection, your scan history, your recorded price history, your saved price alerts, your free-scan count and your purchase entitlements are all stored in the app's own container on your device.
Two things also go into the iOS keychain: the free-scan count, so deleting and reinstalling the app does not silently reset your remaining free scans, and any marketplace API keys you choose to enter. Keychain items are readable only by this app on this device.
CardCapture offers to sign you in on first launch, and lets you carry on without an account if you would rather. There are two ways to sign in, and neither of them creates an account on a server, because there is no CardCapture server. What is stored is kept in the iOS keychain on your device, and you can sign in or out later from Settings › Account.
Apple gives the app a stable identifier for you, and — on the first authorisation only — your name if you allow it. Both are kept in the keychain and are used to show who is signed in. CardCapture does not request your email address. If you revoke access in Settings → your name → Sign in with Apple, the app notices and signs you out locally.
This one creates a profile on this iPhone only. The address you type and a cryptographic hash of your password (PBKDF2-HMAC-SHA256, 210,000 iterations, with a random salt) go into the keychain. The password itself is never stored, and neither the address nor the password is sent anywhere — there is no server to send them to, and for the same reason there is no password reset and no way to recover the account if you forget it. The app says so on the screen where you choose this option.
Signing out keeps your collection and, for the email option, keeps the stored credential so you can sign back in. Deleting the email account erases it from the keychain permanently; your collection is not deleted.
When you sign in, your collection is written to your own private CloudKit database, under your Apple Account, in Apple's iCloud, so your cards come back when you sign in again — after reinstalling, or on another device signed into the same iCloud. Without an account this happens only if you turn it on. That is your storage, not ours. The developer of CardCapture has no access to it, and neither does any other CardCapture user. You can turn it off in Settings › Account; turning it off stops further writes, and deleting the app or signing out of iCloud removes the app's access.
The app also keeps a copy of your collection on your device for each of the last seven days, and before anything removes more than half of it, so a mistake can be undone from Settings › Account › Backups. These copies never leave the device.
Every request below identifies a card. None carries an account, a device identifier, or anything about you. These providers see an ordinary web request and its IP address, and their own logging applies.
| When | Where it goes |
|---|---|
| You download a card database | Scryfall (Magic), YGOPRODeck (Yu-Gi-Oh), OnePieceJSON on GitHub (One Piece), digimoncard.io (Digimon), gcg-api on GitHub (Gundam), the ApiTCG data repositories on GitHub (Dragon Ball, Union Arena, and One Piece or Digimon when their first source cannot be reached), LorcanaJSON (Lorcana), the-fab-cube on GitHub (Flesh and Blood), and TCGdex (Japanese Pokémon). Pokémon in English ships inside the app and downloads nothing. A downloaded database is fetched again about once a week, on Wi-Fi, so new sets arrive. |
| You price a card | The Pokémon TCG API, TCGdex (Japanese Pokémon), Scryfall or YGOPRODeck, depending on the game. If you have supplied your own eBay, Amazon or JustTCG keys, that provider too — using your keys, for that one lookup. |
| You check a slab's certificate, or its sold prices | The grader's own site (PSA, CGC, Beckett, SGC or TAG) opens with the certificate number read from the label, or eBay's sold listings or PriceCharting's price guide open with the card and its grade. Nothing about you is sent. |
| You tap Find it for sale | The store you picked — eBay, Amazon, Cardmarket or TCGplayer — opens in its own app or your browser, with the card's name, set and number in the address. Nothing about you is sent, and nothing is sent at all until you tap. What you do on the store's site is between you and the store, under its own privacy policy. |
| A price alert checks in | The same price providers, from your device, in the background. No server is told which cards you watch, because the watching happens on your phone. |
| You buy a subscription or a scan pack | Apple, through StoreKit. CardCapture is told only whether a purchase is active. It never sees your payment details. |
The camera is used to scan cards and, if you ask for it, to capture the tilt and edge photographs the verification checks need. All of that processing happens on your device. CardCapture does not request access to your photo library.
If you turn on Keep a photo of each scan in Settings › Scan log, a photo of each scanned card is kept on your device — the newest 300 — and included when you export the scan log yourself. It is off unless you turn it on, and the photos are never sent anywhere by the app.
Price alerts are local notifications, created on your device by your device. CardCapture does not use push notifications and has no ability to send you one.
The CardCapture widgets on your Home Screen, Lock Screen and in Control Center either open the scanner or show your collection's value, card count and when it was last valued. The app writes those few figures to a container on your device that only CardCapture and its own widgets can read; nothing is sent anywhere for them.
CardCapture is for collectors of any age and does not knowingly collect personal information from anyone, children included.
CardCapture's App Store page says Data Not Collected, and the app ships a
PrivacyInfo.xcprivacy manifest declaring no tracking and no collected data. That
follows Apple's own definition: data counts as collected when it leaves your device somewhere
the developer or a partner can reach it, and nothing about you does. What you sign in with
stays in your device's keychain; your collection stays in the app and, when you sign in or turn
it on, in your own private iCloud. This page is the readable version of that declaration.
If this policy changes, the date at the top changes with it. Material changes will be described in the App Store release notes for the version that introduces them.
Questions about this policy, or a request about your data, can be sent through the support link on the CardCapture App Store listing, which reaches the developer directly.