Privacy Policy

Effective June 10, 2026 · Arcane Ledger is made by TCGora

This policy explains what information the Arcane Ledger app collects, why, and what happens to it. The short version: we collect what the app needs to work, we don't run ads, and we never sell your personal information.

Information you give us

• Account. If you create an account, we store your email address and a securely hashed password (handled by our backend provider, Supabase) so you can sign in, recover your account, and restore your collection on a new device.
• Profile. An optional display name and an auto-generated friend code, used for the Playgroup features.
• Your collection. The cards you add (names, printings, conditions, quantities, prices paid). With an account, your collection syncs to our cloud so backup/restore and friend features (like shared-deck matching and trade suggestions) work.
• Messages. Direct messages you send to friends in Playgroup are stored so they can be delivered, and are visible only to you and the recipient. You can block users at any time.
• Community submissions. Decks you submit to the Community tab, with your display name, shown publicly after moderator approval.

Card scanning

Card recognition runs on your device by default — camera frames are read locally and are not uploaded. If you use premium exact-printing matching, a photo of the card being scanned is sent to our image-recognition partner (Ximilar) solely to identify the exact printing; we don't use scans for anything else.

Mox (AI advisor)

When you chat with Mox, your messages — and, to make answers useful, a summary of your collection and relevant card data — are processed by our AI provider (Anthropic) to generate the response. Don't put sensitive personal information in chat messages; it's a deck advisor, not a diary.

Collected automatically

• Push token. If you allow notifications, a device push token is stored so the app can deliver them (deck alerts, friend messages, community updates).
• Device identifier. A device ID is checked when starting a free trial, used only to prevent repeat-trial abuse.
• Card data requests. Card information and prices come from Scryfall's public API; those requests carry standard technical information (like any web request) but no account data.

Purchases

Subscriptions are processed entirely by your app store — Google Play on Android, the App Store on iOS. We never see or store your payment details — we only store your subscription status so premium features unlock.

What we don't do

• No advertising, no ad trackers.
• No selling or renting your personal information. Ever.
• No collecting more than the features need.

Data retention & deletion

Your data is kept while your account is active. You can clear your collection in the app at any time (Settings → Account & Backup). To delete your account and all associated cloud data, email support@arcaneledger.app from the account's email address and we'll remove it.

Children

Arcane Ledger is intended for users 13 and older. We don't knowingly collect information from children under 13.

Service providers

We use Supabase (accounts, data storage, messaging), Google Play and the Apple App Store (billing), Expo (app delivery and push notifications), Anthropic (AI responses), Ximilar (premium card-image identification), and Scryfall (card data and images). Each receives only what its job requires.

Changes

If this policy changes meaningfully, we'll update this page and the effective date above.

Contact

Questions? support@arcaneledger.app