legal

privacy policy

last updated november 10, 2026

cardds is a magic: the gathering collection app that runs entirely on your iphone. the developer doesn't operate a server for cardds and doesn't collect, store, sell or share your personal information.

what stays on your device

your collection, decks, finished games, price history, settings and the name you use at the table are stored in a database on your iphone, next to a copy of the card catalog.

cardds has no sign-up and no account, so there's no profile, email address or password held anywhere.

camera and bluetooth

the camera is used only while you're scanning. apple's on-device text recognition reads the card, and only that text is used, to find the card in the catalog on your phone. no photo or video is saved or sent anywhere.

bluetooth is used only to link phones at the table during a game. the phones exchange the game itself: each player's name, a random id for their phone, chosen deck and commander, and life, commander damage and poison changes. it goes directly between nearby phones and never reaches the developer.

backups

when you tap back up now, cardds saves a backup file to your own icloud drive, in the cards folder. those files are covered by apple's icloud terms, and the developer has no access to them. if icloud drive is off, the backup is kept on the device. exporting a csv hands the file to whatever you share it with.

services involved

scryfall (scryfall.com): cardds downloads the card catalog and card images from scryfall, asks it for prices of the cards you own (by card id), and fetches a card's rulings when you open them. no account or personal details are sent. scryfall's own privacy policy applies.

mtgjson (mtgjson.com): when you look for a precon, cardds downloads the public list of preconstructed decks and the deck you pick. nothing about you is sent.

expo: each time the app opens, it checks expo's update service for a newer version. that request includes a random id for this install, and no personal details.

analytics and tracking

cardds contains no analytics, advertising, crash reporting or tracking code, and doesn't use cookies.

this website

cards.gusfl.us is a static website. it sets no cookies and runs no analytics. like any website, the hosting provider (amazon web services) may keep standard request logs.

deleting your data

deleting the app removes all of its data from your iphone. backups can be deleted from icloud drive → cards in the files app.

children

cardds isn't directed to children under 13.

changes

if this policy changes, the new version will be posted on this page with a new date at the top.

contact

questions about this policy: cards@gusfl.us