Privacy Policy

DeckForge — last updated 21 October 2026

The short version: the app scans your cards on your phone and the pictures never leave it. If you pair an account, your card list syncs so you can see it on another device. There is no advertising or third-party tracking. Development apps can send optional usage reports only when you choose to turn sharing on, as described below.

What the app collects

Your card list, and only if you pair an account. When the app is paired with a DeckForge account, the cards you scan — names, sets, collector numbers, quantities and finishes — are sent to our server so the same collection is available on your other devices.

Collection syncing requires an account. Optional development-app usage reports do not require pairing and are controlled separately. The app remains usable with usage sharing turned off.

Optional usage reports in development apps

In the DF Rig development apps, Account → Privacy → Share usage to improve DeckForge starts off. If you turn it on, the app sends JKP Software Inc a random installation identifier, platform, app version and daily facts: first use after opting in, days the app is in the foreground, and whether a successful scan or saved deck occurred that day. These reports contain no names, email, personal device names, card lists, deck contents or chat messages. They are pseudonymous, not anonymous, and are not joined to your account or used for advertising.

Reports go only to the DeckForge server over encrypted HTTPS. Unsent facts remain on your phone for up to 30 days. Reporting records are kept for up to 180 days and covered by protected backups. Turning sharing off stops sending and clears the unsent queue and local identifier; it does not recall reports already received. Turning it on again creates a fresh identifier. Development measurements are labelled separately in the private dashboard. This feature has not been enabled in the App Store or Google Play apps.

What the app does not collect

• Photographs. The camera is used to recognise cards, and that recognition happens entirely on your phone against a card database stored on the device. Images are held in memory only long enough to read them and are then discarded. The app has no ability to upload a photograph — no such feature exists in it.
• Your email address or password. The app never sees either. Pairing works by entering a short code, which the app exchanges for an access token. The token is stored on your device and you can revoke it at any time from the website.
• Anything else. No location, contacts, calendar, files or messages. Apart from the optional development usage reports above, no analytics, no crash reporting, no advertising, and no third-party tracking.

What the website collects

If you create a DeckForge account, we store your email address and a cryptographically hashed password. We never store the password itself.

If you subscribe, payment is handled by the store you subscribe through: Stripe on the website, Google Play in the Android app, or Apple's App Store in the iOS app. Card details go to the payment processor and never to us; we keep only a reference and whether the subscription is active.

Permissions the app asks for

• Camera — to see the card in front of it, while the scanner is open.
• Internet and network state — to sync your collection when you have paired an account, and to download card data, prices and database updates.

That is the complete list. The app requests no other permissions.

How your data is handled

Data sent between the app and our servers is encrypted in transit. Your collection is stored on a server we run. It is not sold, rented or shared with anyone, and it is never used for advertising.

Card names, sets and images come from public Scryfall data, and prices from public sources. Neither involves sending them anything about you.

AI features

Some website features send the text you type — deck lists and questions — to Anthropic to generate a response. Your collection and your account details are not sent. These features are on the website, not in the app.

Deleting your data

You can delete cards, or a whole collection, from within the app or on the website at any time.

To delete your account and everything associated with it, email hire@jkpsoftware.com. We will action it within 30 days and confirm when it is done.

Children

DeckForge is not intended for children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes we will update the date at the top, and for anything significant we will say so in the app.

Contact

hire@jkpsoftware.com