The short version. All Card Scanner has no user accounts and no backend server of ours. Card recognition runs entirely on your device, and your collection never leaves it. The app makes only a few outbound requests, all listed below, and the only one that involves a picture of your card is optional and can be switched off in Settings → Privacy.
This app is published by Ali Kaptanoğlu, an independent developer. For any question about this policy or your data, write to ongorunet@gmail.com.
The app does not ask for, and cannot obtain, any of the following: your name, e-mail address, phone number, contacts, location, advertising identifier, device identifier, or any account credentials. There is no sign-up, no login and no user profile. We operate no server that receives your data.
The app contains no advertising SDK, no analytics SDK, no crash-reporting SDK and no tracking technology of any kind.
The following is written to the app's private storage on your phone and stays there:
This data is never transmitted anywhere. It is removed when you uninstall the app or clear its storage, and you can erase it at any time from within the app.
The app requests the camera permission so it can scan cards, and it can optionally open an image you choose from your gallery. Camera frames are analysed in memory on your device and are not written to your photo library, not stored by the app, and not uploaded — except in the single optional case described next.
Card recognition itself — matching the card against the catalogue of over 800,000 cards — is performed entirely on your device, using a model and index bundled inside the app. No image is sent anywhere for recognition, and recognition works with the network switched off.
To read the small printed text on a card (its name, collector number and set code) more accurately than an on-device reader can, the app can send the image of the scanned card to Google's Lens service. This is used solely to obtain the text of that card, which is then matched against the visual result to pick the correct printing.
Once the image reaches Google, Google's handling of it is governed by the Google Privacy Policy. If you prefer that no card image ever leaves your phone, turn the switch off; every other feature of the app continues to work.
This is the complete list. Nothing else is contacted.
| Destination | When | What is sent |
|---|---|---|
lensfrontend-pa.googleapis.com(Google Lens) |
Only while the Settings → Privacy switch is on, when you scan a card | The image of the scanned card. Nothing about you. |
api.pokemontcg.io |
When you open a Pokémon card result | The card's public identifier only (for example base1-4). No image, no personal data. |
api.scryfall.com |
When you open a Magic: The Gathering card result | The card's public identifier only. No image, no personal data. |
| Public card-image servers (for example images.pokemontcg.io) |
To display the official artwork of a matched card | A standard image request for that card's picture. |
| eBay | Only if you tap “view on eBay” | Opens a search link in your browser. The app sends nothing itself. |
| Google Play services | First use of on-device text recognition | Downloads the on-device recognition model. Handled by Android, not by us. |
The requests to card databases carry your IP address, as any internet request necessarily does. Those services are operated by third parties under their own privacy policies: pokemontcg.io and Scryfall.
Prices shown in the app come from public third-party card databases or from a snapshot bundled with the app. They are indicative market figures, are not updated continuously, and are not an appraisal, an offer, or investment advice. Do not rely on them for a sale or a purchase.
The app is not directed at children under 13 and does not knowingly collect personal information from anyone, including children. Because no personal data is collected at all, there is nothing for us to delete on request — but you can clear all locally stored data from within the app at any time.
Since we hold no personal data about you, there is no data of yours for us to access, correct, export or erase. All data the app produces is on your own device and under your control: you can export your collection to CSV, clear it in the app, or uninstall the app to remove everything.
Your collection is held in the app's private storage, which Android isolates from other apps. All network requests listed in section 6 use encrypted HTTPS connections.
If this policy changes, the revised version will be posted at this address with a new “last updated” date. Material changes affecting what leaves your device will also be reflected in the app's settings screen.
Questions, corrections or privacy requests: ongorunet@gmail.com