This Privacy Policy applies to the Solira trading-card scanner mobile application for iOS and Android and the website at tcg-card-scanner.com (together, the “Services”). Solira is the provider responsible for the processing described here. This policy is intended to support the privacy disclosures shown on our App Store product page.
1. Privacy summary
- A card image is transmitted only when you ask Solira to identify a card.
- Saved collection records are currently stored locally on your device.
- No Solira account is required for the current collection experience.
- We do not request precise location or microphone access.
- We do not sell personal information or use it for cross-context behavioral advertising.
- App Store payments are handled by Apple; Solira does not receive full payment-card details.
- Website analytics and masked session replay load only after website consent.
2. Information processed by the mobile app
Card images and identification data
When you initiate a scan, Solira captures the trading-card image you frame or the image you select. The app resizes and compresses the image and sends it to our Supabase Edge Function. The image is processed to read visible card evidence and find a likely catalog match. Returned information may include the game, card name, set, collector number, rarity, language, printing, match confidence, condition reference, pricing source, estimate, and update time.
Solira does not intentionally use card images to identify people. Do not include faces, addresses, financial information, or other sensitive content in a card scan.
Local collection records
Cards you choose to save are stored in the app's local storage on your device. A saved record can include card metadata, pricing context, the local image reference, and the date added. The app uses these records to display your vault, card count, and estimated collection reference value.
Device and operational information
Solira and its infrastructure providers may process standard technical information needed to deliver and secure requests, such as IP address, app version, device and operating-system information, timestamps, request status, diagnostic errors, and abuse-prevention signals.
Subscription and purchase information
If you view a paywall, start a trial, purchase Solira Pro, restore a purchase, or interact with a subscription, Solira and Superwall may process product identifiers, paywall events, app-user or device identifiers, trial status, entitlement status, transaction status, renewal information, and purchase-restoration events. Apple processes the payment and provides the transaction status needed to unlock the applicable entitlement. We do not receive your complete payment-card number.
Support communications
If you contact us, we receive the email address, message, attachments, and diagnostic or transaction details you choose to provide. Do not send full payment-card information.
3. Device permissions
- Camera: used to photograph a trading card after you choose to scan.
- Photo library: used when you choose an existing card image.
- Add to photo library: used only when you request that an image be saved.
Solira does not request microphone access or precise location access. You can change permissions through iOS or Android settings. Refusing a permission prevents only the feature that requires it.
4. Website information and analytics
Our website host may process IP address, requested URL, browser type, timestamps, and security logs. If you consent through the website notice, Google Analytics and Mixpanel may process visited pages, referrer and campaign parameters, approximate location derived from IP address, browser and device information, clicks, link destinations, form-submission events, scroll depth, and interaction timestamps.
Mixpanel session replay is enabled only after consent. We configure replay to mask all displayed text and form inputs and to block images, video, and audio. We do not intentionally send contact-form values to analytics providers. Analytics providers may use cookies or local storage for consent, attribution, identifiers, and sessions.
5. How we use information
- Provide card recognition and return a likely catalog match.
- Retrieve card details and informational market estimates.
- Save and display the collection you create on your device.
- Present subscription offers, verify entitlement status, and restore purchases.
- Respond to support, privacy, billing, and product-feedback requests.
- Monitor reliability, diagnose errors, prevent abuse, and secure the Services.
- Measure website navigation and conversions after consent.
- Comply with law, accounting requirements, and our Terms of Service.
6. Service providers and disclosures
Solira uses providers for limited operational purposes:
- Supabase — backend infrastructure and Edge Function processing.
- Google Gemini — visual card-detail extraction during identification.
- JustTCG — card catalog and informational pricing data.
- TCGdex and card-image hosts — card artwork and image metadata.
- Superwall — paywalls, subscription events, and entitlement management.
- Apple — App Store distribution, purchases, subscription status, and refunds.
- Google Analytics and Mixpanel — consented website analytics and masked replay.
- Website hosting providers — delivery, performance, and security logging.
Providers process information under their own terms and privacy commitments. We may also disclose information when required by law, to protect users and the Services, to investigate fraud or abuse, or in connection with a merger, financing, or sale subject to appropriate safeguards.
We do not sell personal information and do not share it for cross-context behavioral advertising.
7. Retention
- Local collection: remains on your device until you remove cards, clear app storage, or uninstall Solira.
- Scan processing: images are submitted for on-demand processing. We do not provide a user-facing cloud archive of scans. Providers may retain limited request data under their security and service-operation policies.
- Subscription records: retained as necessary to provide entitlements, restore purchases, maintain financial records, prevent fraud, and comply with law.
- Support: retained as reasonably necessary to respond, document the resolution, and handle disputes.
- Website analytics: retained according to our provider configuration and the provider's applicable policy.
8. Your controls and deletion options
- Decline or revoke camera and photo permissions through device settings.
- Remove individual cards from your collection.
- Clear Solira's app data or uninstall the app to remove locally stored records.
- Manage or cancel subscriptions through your Apple ID subscription settings.
- Decline website analytics or reopen “Analytics preferences” in the website footer.
Because the current collection is stored locally and no Solira account is required, we generally cannot locate or delete device-only collection data for you. For support messages, operational records, or other data associated with an identifier you provided, email privacy@tcg-card-scanner.com. Describe the request and the identifier used. We may verify your request and may retain information where required by law or needed for security and dispute resolution.
9. Legal bases and regional rights
Where a legal basis is required, we process information to perform the service you request, with consent, for legitimate interests such as security and product reliability, and to comply with legal obligations. Depending on your location, you may have rights to access, correct, delete, restrict, object, withdraw consent, or receive a portable copy of certain personal information. You may also have the right to complain to your local data-protection authority.
10. Children's privacy
Solira is not directed to children under 13 or the minimum digital-consent age applicable in their jurisdiction. We do not knowingly collect personal information from children. A parent or guardian who believes a child submitted personal information should contact us.
11. Security and international processing
We use reasonable safeguards designed to protect information, including encrypted network transport and purpose-limited provider access. No system is completely secure. Providers may process information outside your country; where required, transfers are subject to appropriate legal safeguards.
12. Policy changes
We may update this policy as Solira, our providers, or applicable law changes. The revised version will be published at this URL with a new “Last updated” date. Material changes may also be communicated in the app or through another appropriate channel.
13. Contact
Privacy questions and requests: privacy@tcg-card-scanner.com
General support: support@tcg-card-scanner.com
Support page: tcg-card-scanner.com/contact