Privacy Policy

Last updated: June 2, 2026

This Privacy Policy explains how Sorcery Inventory collects, uses, stores, and protects information when you use the Android app, website, public catalog pages, download page, and related backend services.

1. Information we collect

Depending on how you use the app, we may collect:

Account information: username, email address, password hash, login/session identifiers, plan/subscription status, and admin flags when applicable.
Collection data: folders, card names, quantities, finish/foil status, selected card collection/edition, notes, public folder settings, share codes, and inventory preferences.
Card scan data: images selected or captured by you for card recognition, scan results, recognized card names, scan confidence, and related catalog metadata.
Catalog and pricing data: card metadata and pricing matched to your inventory from TCGCSV/TCGPlayer product data.
Usage and analytics data: app screen time segments, scan counts, batch scan statistics, catalog actions, public folder opens, landing page visits, download button clicks, rewarded ad events, banner ad impressions, and AI request/token/cost metrics.
Device and technical data: request timestamps, IP-derived network information available to the server, HTTP headers, app errors, and basic diagnostics needed to operate and secure the service.

2. Camera and photo permissions

The app requests camera and image/photo permissions so you can scan cards and choose images from your device. On Android, this can include READ_MEDIA_IMAGES. We use this permission only when you choose to pick images or run batch scans. The app does not read your photo library in the background and does not access images unless you initiate an action that requires them.

3. How scan images are used

Images you capture or select may be uploaded to the backend and/or AI recognition services to identify Sorcery TCG cards. The result is used to suggest card names and catalog matches. Scan images are used for recognition and diagnostics and are not sold.

4. How we use information

To create and manage your account.
To store and sync your card inventory, folders, preferences, and public folder settings.
To recognize cards, match catalog data, and show prices and metadata.
To enforce plan limits, scan quotas, rewarded ad bonuses, and subscription state.
To provide public shared folder/web catalog pages when you enable sharing.
To measure app usage, landing page visits, download clicks, rewarded ads, banner impressions, and AI costs for administration and service improvement.
To detect, troubleshoot, secure, and improve the app and backend.

5. Public sharing

If you enable a public folder, anyone with the share code or generated web link can view the cards in that folder in read-only mode. Public folder pages may show card names, quantities, finish, selected collection/edition, card metadata, prices, and the sharing username. You can disable sharing from the app.

6. Advertising and rewarded scans

Basic users may see Google AdMob banner ads and rewarded ads. Rewarded ads can grant bonus scans after completion. We record ad starts, reward grants, bonus scan amounts, and banner impressions for quota and admin metrics. Google may process advertising identifiers and ad interaction data according to its own policies.

7. Third-party services

Sorcery Inventory may use third-party providers, including:

Google/AdMob for ads and rewarded ads.
Google Play for Android distribution and subscriptions when enabled.
AI recognition providers for card image recognition.
MongoDB/Railway or hosting providers for backend hosting, database storage, and logs.
TCGCSV/TCGPlayer data sources for card catalog and pricing data.

These providers may process data under their own privacy policies and terms.

8. Data retention

We keep account and collection data while your account is active or as needed to provide the service. Operational logs, analytics events, and diagnostics may be retained for troubleshooting, security, admin reporting, and cost analysis. Public folder data remains accessible while sharing is enabled.

9. Security

We use reasonable technical and organizational measures to protect data, including authentication, server-side access controls, and database separation for user-owned records. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your choices and rights

You can choose not to grant camera or photo permissions, but scan and image import features may not work.
You can edit or delete folders and cards in the app.
You can disable public folder sharing.
You can choose whether to watch rewarded ads.
You may request account/data deletion or access by contacting support.

11. Children's privacy

Sorcery Inventory is intended for collectors and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

12. Changes to this policy

We may update this Privacy Policy as the app changes. The updated version will be posted at /privacy with a new “Last updated” date.

13. Contact

For privacy questions, data requests, or account deletion requests, contact the Sorcery Inventory operator through the support channel listed on the website or app distribution page.