Privacy Policy

DeckForge — last updated 9 August 2026

The short version: the app scans your cards on your phone and the pictures never leave it. If you pair an account, your card list syncs so you can see it on another device. There is no advertising, no analytics and no tracking of any kind.

What the app collects

Your card list, and only if you pair an account. When the app is paired with a DeckForge account, the cards you scan — names, sets, collector numbers, quantities and finishes — are sent to our server so the same collection is available on your other devices.

That is the only thing the app sends. The app is fully usable without an account, and without one nothing leaves your phone.

What the app does not collect

• Photographs. The camera is used to recognise cards, and that recognition happens entirely on your phone against a card database stored on the device. Images are held in memory only long enough to read them and are then discarded. The app has no ability to upload a photograph — no such feature exists in it.
• Your email address or password. The app never sees either. Pairing works by entering a short code, which the app exchanges for an access token. The token is stored on your device and you can revoke it at any time from the website.
• Anything else. No location, contacts, calendar, files or messages. No analytics, no crash reporting, no advertising, and no third-party tracking.

What the website collects

If you create a DeckForge account, we store your email address and a cryptographically hashed password. We never store the password itself.

If you subscribe, payment is handled by the store you subscribe through: Stripe on the website, Google Play in the Android app, or Apple's App Store in the iOS app. Card details go to the payment processor and never to us; we keep only a reference and whether the subscription is active.

Permissions the app asks for

• Camera — to see the card in front of it, while the scanner is open.
• Internet and network state — to sync your collection when you have paired an account, and to download card data, prices and database updates.

That is the complete list. The app requests no other permissions.

How your data is handled

Data sent between the app and our servers is encrypted in transit. Your collection is stored on a server we run. It is not sold, rented or shared with anyone, and it is never used for advertising.

Card names, sets and images come from public Scryfall data, and prices from public sources. Neither involves sending them anything about you.

AI features

Some website features send the text you type — deck lists and questions — to Anthropic to generate a response. Your collection and your account details are not sent. These features are on the website, not in the app.

Deleting your data

You can delete cards, or a whole collection, from within the app or on the website at any time.

To delete your account and everything associated with it, email hire@jkpsoftware.com. We will action it within 30 days and confirm when it is done.

Children

DeckForge is not intended for children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes we will update the date at the top, and for anything significant we will say so in the app.

Contact

hire@jkpsoftware.com