DeckSleeve has no accounts and no servers, and its developer receives none of your data. The cards you own, what you paid for them, the sets you follow and the cards you watch stay on your device and, if you turn sync on, in your private iCloud: none of it reaches us. Card photos never leave your phone. What follows lists every moment the app talks to the outside world and exactly what leaves it.
You point the camera at a trading card — Pokémon, Magic: The Gathering, Yu-Gi-Oh!, One Piece, Dragon Ball Super — and the app recognises it, adds it to your collection and tells you what it is worth today. It keeps track of sets, of your collection's value over time and of the prices of cards you want to watch. It is available for iPhone and Android: this policy covers both, and says so where the two versions behave differently.
Everything you enter — cards, quantities, condition, language, price paid, notes, followed sets, watched cards and price thresholds — is stored in the app's database on your device, protected by the system's encryption. So are the downloaded catalogues, the history of prices seen and the card images already shown, so they are not downloaded twice.
There is no sign-up and no profile. Deleting the app deletes your data, except the iCloud copy if you turned it on. It is included in your device backups, if you have them on:
On iPhone, from version 1.4, DeckSleeve Pro members can keep their collection in iCloud and find it on all their devices, under Profile → Settings → iCloud and backup. It stays off until you turn it on. It goes through your Apple Account: we have no servers and see nothing. When it is on:
Photos, catalogues, prices and card images do not go to iCloud: each device gets them from the sources. If the same card changes on two devices, the last edit wins. If you turn sync off, or DeckSleeve Pro ends, your collection stays on the phone and the iCloud copy stays where it is. To delete it, use iCloud storage management in your phone's settings, under DeckSleeve: the app notices, turns sync off and leaves the collection on the phone untouched. If you reset your iCloud Keychain, the encrypted copy can no longer be read, and the app rebuilds it from what is on the phone.
On Android there is no sync: the Google account backup described above applies.
The camera is used only to read cards. Recognition happens on the device: on iPhone with Apple's built-in tools, on Android with Google's ML Kit text recognition, which runs on the phone with a model shipped inside the app. No photo or frame is uploaded anywhere.
On Android, ML Kit may send Google technical data about how it works: phone model and system, app version, recognition timings and error codes. It does not send the images or the text read. Google handles it under the ML Kit terms.
The last few frames read are kept briefly in a temporary folder of the app, to show your photo next to the catalogue picture when the app asks you to confirm a card. The folder is emptied every time you reopen the scanner, and the system may empty it at any time.
If you choose to read a photo from your library, the app uses the system picker, on iPhone as on Android, which hands over only the photo you picked: the app has no access to the rest of your library.
To recognise cards and price them, the app downloads catalogues and prices from public sources. These requests contain nothing that identifies you: no name, no email, no device identifier, no list of what you own. They contain only what is needed to find a card:
The sources are TCGdex and pokemontcg.io (Pokémon), Scryfall (Magic), YGOPRODeck and yaml-yugi (Yu-Gi-Oh!), TCGCSV (One Piece, Dragon Ball and sealed products), the public price guides of Cardmarket and the exchange rates of the European Central Bank, to show prices in your currency. On Android the TCGCSV price lists come from a copy we publish on GitHub Pages (nicolomarinangeli.github.io/decksleeve-dati): it is a static file, the same for everyone; GitHub sees the IP address like any service, and nothing reaches us. Like any internet service, they see the IP address a request comes from and handle it under their own policies. The app identifies itself to them by its name and version, nothing else.
If you turn notifications on, the app occasionally — even when closed — asks the same sources for the prices of cards you watch or own, and compares the result with your thresholds on the device. Notifications are local: the phone prepares and shows them, and no server sends them, because there is no server. Turn them off in the app under Profile → Notifications, or in the system settings.
The Home Screen widgets show your collection's value and the cards moving it. The app writes that summary to a protected area of the device that only DeckSleeve and its widgets can read; it never leaves the device. With «Hide amounts» on, the widgets show no figures. The Control Center and Lock Screen button only opens the app on the scanner: it reads and sends nothing. On Android, the Quick Settings tile does the same.
Export creates a CSV file of your cards: on iPhone it hands it to the system share sheet, on Android it saves it where you choose with the document picker. Where it goes next is up to you. Import reads only the file you pick in the system picker.
DeckSleeve Pro — a monthly or yearly subscription, or a one-time purchase — goes through the App Store on iPhone and Google Play on Android. We see only whether a purchase is active on the device: not who you are, not how you paid. Restoring purchases talks to Apple or Google, not to us. Subscriptions are cancelled from your Apple account settings or from Google Play → Payments & subscriptions.
On Android the app may ask you for a review with Google Play's own window: Google handles it, and we do not know whether you left one.
None. We collect no personal data, keep no user database, and receive no usage statistics or crash reports. The ML Kit technical data described above goes to Google, not to us, and what you put in iCloud is kept by Apple for you. On Android, if you agreed in your phone's settings to share diagnostic data, Google Play may show us anonymous, aggregated statistics about the app's crashes and freezes, with nothing that identifies you.
The app contains no analytics or tracking tools, shows no ads, does not use the device's advertising identifier and shares nothing with advertisers or brokers.
We keep nothing, because nothing reaches us. Your data stays on your device for as long as you decide. You can remove single cards from your collection, remove a game and its catalogue under Profile → Games and catalogue, or delete the app, which erases everything. The iCloud copy, if you turned it on, is deleted as described above. There is no need to ask us: we have no copy.
The app is not directed at children under 13 and does not knowingly collect data from children. Collecting data from no one, it collects none from them.
The EU General Data Protection Regulation (GDPR) gives you rights of access, rectification, portability and erasure towards whoever processes your data. Here the answer is structural: we process no personal data, so there is nothing for us to show you or erase. The data you entered is already entirely in your hands, and the CSV export gives it to you in a portable file.
DeckSleeve is an independent app. It is not produced, endorsed or sponsored by The Pokémon Company, Nintendo, Wizards of the Coast, Konami or Bandai. Card names and images belong to their respective owners.
If this policy changes, the date at the top changes with it.
For any question: nicolom.dev.supporto@gmail.com