Privacy Policy

Effective 23 October 2026 · Deck Pics, a product of Big Deck Energies LLC

The short version. We collect the email address you sign up with, the cards you save to your binders, the cards you add to your watch list and your binders' wish lists, your show records if you use Show Mode, and any message you send support. Photos of cards you scan are sent to Google to be identified and are not stored on our servers. We keep an anonymous count of which cards are scanned and searched — the card and the day, never who — and we may share or sell those counts, and counts of how many people watch a card, to other businesses. We do not use analytics, we do not track you across other apps or websites, we show no advertising, and we do not sell or share your information with anyone. If the app breaks we send ourselves the error — never your cards, and never anything linked to you.

1. Who we are

Deck Pics is operated by Big Deck Energies LLC ("we", "us"), 24 West Main Street, Suite E, Cuba, NY 14727. For anything in this policy, write to privacy@margintcg.app.

2. What we collect, and why

What	Why	Where it lives
Your email address	It is your account. Your Deck Pics account is the same account as the Big Deck Energies store.	Our WordPress/WooCommerce site
Your password	To sign you in.	Stored by WordPress, hashed. It is never sent to our pricing servers, never written to your device, and never recorded in any log.
Cards you save — name, set, number, condition, grade, and the price we calculated	So your binders are there when you come back, on any device.	Cloudflare D1, tied to your account ID
Photos you take of cards	To identify the card.	Not stored by us. See section 3.
A small picture of a card you save to a binder	So your collection shows your card, not a stock image.	Only when you save a card. Cloudflare R2, tied to your account ID. See section 3.
Error reports, if the app breaks	So we can find out it is broken and fix it.	Cloudflare D1. Not linked to your account — see section 5
A count of the cards you priced, and when	So we can tell how much of your plan's scan allowance you have used. We keep the count and the date — not the card, not the photo, not the price.	Cloudflare D1, tied to your account ID
Your watch list — the cards you chose to watch, when you added them, and the price we last told you about	So we can tell you when a card you watch moves in price.	Cloudflare D1, tied to your account ID
Your wish lists — for each binder, the cards you still want for it	So each binder can show what it is missing and its total cost, and tell you when those prices move. A card comes off a binder's wish list when you add it to that binder.	Cloudflare D1, tied to your account ID
Your show records, if you use Show Mode — each show’s name, place and date; each deal’s time, money and card value in and out, card counts, how digital money was paid (if you say), the name of the person you dealt with and a note (both only if you type them), and a photo of the deal (only if you take one); and the show’s expenses (what for, how much, how paid)	So your show ledger is kept safe if your phone is lost or replaced, and so you can export it as a PDF. Deals are never deleted, only voided, so the record stays honest.	Cloudflare D1, and deal photos in Cloudflare R2, tied to your account ID
Price alerts we have sent you	So you can see them in the app.	Cloudflare D1, tied to your account ID
Your phone’s notification address, if you turn on price alert notifications	So we can send your price alerts to your phone. Apple issues this address for Deck Pics on that phone; it is not your phone number and says nothing about you on its own.	Cloudflare D1, tied to your account ID. Removed when you turn notifications off in the app, when Apple tells us it no longer works, or when you delete your account
Your subscription, if you buy one — which plan (Pro, monthly or yearly), when it started, when it renews or ends, whether it was refunded, and Apple’s transaction number for it	So the app knows which plan you have paid for, and so a renewal, a cancellation or a refund reaches your account. Apple sends us these details, signed, when you buy and each time the subscription changes.	Cloudflare D1, tied to your account ID
An anonymous count of which cards are scanned and searched	To see which cards are popular. See section 5.	Cloudflare D1. Not linked to you — it holds the card, the day and a number, and nothing about who
Support messages — your name, email, message, app version, and IP address	To answer you, and to stop abuse of the contact form.	Cloudflare D1, and emailed to us

We do not ask for your real name, address, phone number or payment details. Deck Pics Pro is billed by Apple through the App Store — Apple takes the payment, and we never see your card details, your Apple ID or your billing address.

3. Photographs of cards

This is the part worth reading closely.

When you scan a card, the photo is sent to our server, which forwards it to Google (Gemini, via Google Cloud Vertex AI) to work out which card it is. If the card is a graded slab and the certificate number cannot be read, the photo may also be sent to CardHedge to read the label.

Scanning a card stores nothing. No image file is written to our storage on the scan path. The photo passes through and is gone.
Saving a card to a binder is the exception, and only if you do it. When you add a card to your collection we keep a small picture of it — a thumbnail, not the full-size photo — so your collection shows the card you actually own rather than a stock image. You can replace it with a new picture at any time, and it is deleted when you delete the card, the binder, or your account. It is never sent to the pricing services in section 4, and it is not used for anything else.
The photo does not carry your identity. It is sent with the card prompt and nothing else — no email address, no account ID, no login token.
On your device, the full-size photo is discarded as soon as the scan finishes. A small thumbnail is kept with the batch you are working on so you can see what you scanned, and is deleted with it.

Google and CardHedge handle that image under their own terms. We do not control their retention.

4. Who else sees anything

To price a card we ask several market data services about it. They receive card names, set numbers, grades and search terms — never your identity, your email, or your photo. These calls are made by our server, so those services see our server, not you or your phone.

Service	What it receives
Google (Gemini / Vertex AI)	The card photograph and the prompt
CardHedge	Certificate numbers and card identity; a photograph only when a slab label cannot otherwise be read
JustTCG, TCGdex, Pokemon Price Tracker, PokeWallet	Card names, numbers and set identifiers
eBay	A search phrase built from the card's name, number and grade. eBay is queried with our own application credentials, not on your behalf and not linked to you.
jsDelivr (cdn.jsdelivr.net)	Nothing about your cards. It is a public library service, and the app loads one shared code file from it (the engine that runs the card-recognition models on your phone). Like any website you visit, it sees your IP address and the fact that a page asked for that file.
Cloudflare	Hosts our servers, database and storage
Resend	Delivers support emails to us
Apple Push Notification service	Your phone’s notification address and the text of a price alert (the card’s name and its price move), only if you turn notifications on

Card popularity counts. We may share or sell the anonymous counts described in section 5 — how often a card is scanned or searched, and how many people are watching it — to card vendors, marketplaces or other businesses. They receive numbers about cards. They never receive your account, your email, your binders, your watch list or anything else that could identify you.

Margin Books. Margin Books is our own bookkeeping service, run by the same company, Big Deck Energies LLC. If your account has Margin Books, you can choose to send a closed show to it with Send to Books: that show’s record (deals, names and notes you typed, deal photos and expenses) goes to Margin Books under your sign-in. Nothing is ever sent automatically, and the button only appears for accounts that use Margin Books. A show you have sent stays in Margin Books (it is part of that business’s books) even if you later delete it here or delete your Deck Pics account.

Tapping an eBay link in the app opens eBay in your browser. From that point eBay sees you as any website visitor would.

5. What we deliberately do not do

No analytics. There is no Google Analytics, no Firebase, no Sentry, no Mixpanel, no advertising SDK, and no tracking pixel anywhere in the app. Nothing measures what you look at, how long you stay, or what you do.
One exception, and it is errors only. If the app hits a bug and stops working, it sends us the error message, the line of our own code it came from, the app version and which tab you were on — to our own server, not to anybody else's. It does not include your account, your email, your cards, your prices or your photos, and it is not linked to you: there is no account number in it and no way for us to tell whose phone it came from. It is capped at a handful of reports per session. We do this because an app that breaks at a card show is otherwise invisible to us until somebody writes in.
A second exception, and it counts cards, not people. Each time a card is priced — from the camera or from a search — we add one to a running count for that card and that day. The count holds the card (name, set, number, and the grade for a slab), the day, whether it came from a scan or a search, and a number. It holds no account, no email, no device, no photo, no price and no time of day, so there is nothing in it to connect back to you. Counts of how many people are watching a card are built the same way, from totals only. We use these counts to see which cards are popular, and we may share or sell them (see section 4).
No tracking across other apps or websites.
No advertising, and no sale or sharing of your information — anything linked to you — for anyone else's marketing or any other purpose.
No profiling. We do not build a picture of you from what you scan.

6. What is stored on your own device

Your sign-in token and email address, so you are not asked to log in every time.
The batch you are working on, including small thumbnails.
Recent scan history, which is automatically discarded after 48 hours.
A copy of your collection — the cards in your binders, their prices and the dates those prices are from, but not their pictures — so the app can still show it when you have no signal. It is refreshed while you are online and is only ever shown to the account it belongs to.
Your show records, written on the phone first so a deal is saved even with no signal, then copied to our server.
Your payment QR codes, if you add any to Get Paid. These pictures stay on this phone only: they are never sent to us or anyone else. Deleting the app deletes them.

Signing out deletes the token, the saved copy of your collection, and clears the open batch from the device.

7. How long we keep things

Data	Kept for
Your account and email	Until you ask us to delete it
Cards in your binders	Until you delete them, or until your account is deleted
The picture of a card you saved to a binder	Until you replace it, delete the card, or delete your account
Your show records and their photos	Until you delete the show, or your account is deleted. A voided deal or expense stays on its show’s record
The count of cards you priced	Until your account is deleted
Your watch list and your price alerts	Until you take the card off your watch list, or your account is deleted
Your wish lists and their alerts	Until the card comes off the wish list (you take it off, or add it to that binder), you delete the binder, or your account is deleted
Anonymous card popularity counts	Indefinitely. They are about cards, not about you, and there is nothing in them to delete with an account
Error reports	Until we have fixed the bug. They are not linked to you, so there is nothing in them to delete with an account
Your subscription records	Until your account is deleted. Deleting your account does not cancel the Apple subscription itself — cancel it in Settings → your name → Subscriptions
Support messages	12 months, then deleted automatically
Price data we cache	72 hours. It is about cards, not about you.
Scan history on your device	48 hours
A scan history file, if you export one for support	30 days, then deleted automatically

8. Your choices

Delete individual cards or whole binders at any time inside the app. Deletion is immediate and permanent.

Delete your account and everything in it from inside the app: Settings → Delete my account. It removes your binders, your saved cards, your watch list, wish lists and price alerts, your notification sign-up, your show records and their photos, your subscription records, your exported scan history and your account, immediately and permanently (an Apple subscription itself is cancelled in Settings, not here). If you cannot get into the app, email privacy@margintcg.app and we will do it for you.

Or do it yourself, right now. Settings → Delete my account inside the app deletes everything immediately, without asking us. Step-by-step instructions are on our account deletion page.

Ask what we hold about you, or ask for a copy, at the same address.

Depending on where you live you may have additional rights over your personal information, including access, correction, deletion and portability. Write to us and we will honour them.

9. Children

Deck Pics is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has created an account, write to us and we will delete it.

10. Security

Everything travels over HTTPS. Your password is held by WordPress in hashed form and never reaches our pricing servers. Your sign-in token is not stored on our servers at all — it is checked against a signature on each request and then discarded. No system is perfect, and we will tell you promptly if something happens that affects your information.

11. Changes

If this policy changes in a way that matters, we will change the date at the top and, for anything significant, tell you in the app.

12. Contact

privacy@margintcg.app for anything about your data. support@margintcg.app for everything else.