Last updated: [TODO: publication date]
This policy covers https://cardframescanner.com. The CardFrame iPhone app is a separate product with its own data practices; see its App Store listing for those.
You do not need an account to use this site, and there is nothing to sign up for. We do not ask for your name, your email address or your collection, and there is no login, no user profile and no newsletter. Nothing you type into the search box is tied to you.
Server logs. Like any website, requests reach a server that records the URL, the time, the browser’s user-agent string and the requesting IP address. These are used to keep the site running and to spot abuse, and are not used to build a profile of you.
Analytics. [TODO: state which analytics are enabled]. If cookie-setting analytics are enabled, you will be asked for consent before any such tag loads, and you can change your mind at any time. With them disabled, the site sets no analytics cookies at all.
A local preference or two. The site stores a small amount of data in your browser’s own storage — for example, the fact that you dismissed the app prompt, so it does not reappear immediately. This never leaves your device and is not readable by us.
Card images are loaded directly from TCGplayer’s public image CDN, and a small number of cards from other publishers’ image hosts. Loading an image tells that host your IP address and browser, as embedding any third-party image does.
Price data comes from TCGplayer’s public market data. We send them nothing about you to obtain it.
Store links. Following a download link hands you to Apple, who apply their own privacy policy. The link may carry a campaign tag telling us which page a download came from — it identifies the page, not the person.
If you are in the UK, EU or another region with data-protection rights, you may ask what personal data is held about you, ask for it to be corrected or deleted, and complain to your local supervisory authority. Since the site holds no account data, in practice this means server logs. Contact us and we will handle it.
The site is not directed at children under 13 and does not knowingly collect their personal data.
If this policy changes in a way that matters, the date at the top changes with it.
[TODO: data controller name, address and contact email]. See the contact page.