legal
privacy policy
last updated november 10, 2026
cardds is a magic: the gathering collection app that runs entirely on your iphone. the developer doesn't operate a server for cardds and doesn't collect, store, sell or share your personal information.
what stays on your device
your collection, decks, finished games, price history, settings and the name you use at the table are stored in a database on your iphone, next to a copy of the card catalog.
cardds has no sign-up and no account, so there's no profile, email address or password held anywhere.
camera and bluetooth
the camera is used only while you're scanning. apple's on-device text recognition reads the card, and only that text is used, to find the card in the catalog on your phone. no photo or video is saved or sent anywhere.
bluetooth is used only to link phones at the table during a game. the phones exchange the game itself: each player's name, a random id for their phone, chosen deck and commander, and life, commander damage and poison changes. it goes directly between nearby phones and never reaches the developer.
backups
when you tap back up now, cardds saves a backup file to your own icloud drive, in the cards folder. those files are covered by apple's icloud terms, and the developer has no access to them. if icloud drive is off, the backup is kept on the device. exporting a csv hands the file to whatever you share it with.
services involved
scryfall (scryfall.com): cardds downloads the card catalog and card images from scryfall, asks it for prices of the cards you own (by card id), and fetches a card's rulings when you open them. no account or personal details are sent. scryfall's own privacy policy applies.
mtgjson (mtgjson.com): when you look for a precon, cardds downloads the public list of preconstructed decks and the deck you pick. nothing about you is sent.
expo: each time the app opens, it checks expo's update service for a newer version. that request includes a random id for this install, and no personal details.
analytics and tracking
cardds contains no analytics, advertising, crash reporting or tracking code, and doesn't use cookies.
this website
cards.gusfl.us is a static website. it sets no cookies and runs no analytics. like any website, the hosting provider (amazon web services) may keep standard request logs.
deleting your data
deleting the app removes all of its data from your iphone. backups can be deleted from icloud drive → cards in the files app.
children
cardds isn't directed to children under 13.
changes
if this policy changes, the new version will be posted on this page with a new date at the top.
contact
questions about this policy: cards@gusfl.us
