Privacy policy

This policy covers https://cardframescanner.com. The CardFrame mobile app is a separate product with its own data practices; see its store listing for those.

The short version

You do not need an account to use this site, and there is nothing to sign up for. We do not ask for your name, your email address or your collection, and there is no login, no user profile and no newsletter. Nothing you type into the search box is tied to you.

What the site collects

Server logs. Like any website, requests reach a server that records the URL, the time, the browser’s user-agent string and the requesting IP address. These are used to keep the site running and to spot abuse, and are not used to build a profile of you.

Analytics. We count visits with Umami, a privacy-friendly analytics tool that runs on our own server. It sets no cookies, does not track you across sites and does not identify you; it records pages viewed, the referring site, the browser type and the country derived from the request. The site uses no advertising or social-media tracking. Our CDN (Cloudflare) may set a strictly necessary security cookie to protect the site from abuse.

A local preference or two. The site stores a small amount of data in your browser’s own storage, for example the fact that you dismissed the app prompt, so it does not reappear immediately. This never leaves your device and is not readable by us.

What the site does not collect

• No accounts, passwords or email addresses.
• No payment details: nothing is sold on this site.
• No collection or portfolio data. That lives in the app.
• No advertising profile is built from your browsing here.

Third parties

Card images are loaded from CardFrame’s own image storage and, for some games, from public card image hosts (Scryfall for Magic: The Gathering, the PokiFrame image host for Pokémon). Loading an image tells that host your IP address and browser, as embedding any third-party image does.

Price data is estimated from public marketplace data. We send nothing about you to obtain it.

Store links. Following a download link hands you to Google Play (or, once the iPhone app is out, the App Store), which applies its own privacy policy. The link may carry a campaign tag telling us which page a download came from; it identifies the page, not the person.

Your rights

If you are in the UK, EU or another region with data-protection rights, you may ask what personal data is held about you, ask for it to be corrected or deleted, and complain to your local supervisory authority. Since the site holds no account data, in practice this means server logs. Contact us and we will handle it.

Children

The site is not directed at children under 13 and does not knowingly collect their personal data.

Changes

If this policy changes in a way that matters, the date at the top changes with it.

Who to contact

The data controller is Happread, Poland. Write to [email protected] with any question or request about your data (access, correction, deletion, objection). You may also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO). See the contact page.