Privacy Policy

1. Scope and data roles

RareStack: Card Value Scanner can be used in guest mode. Account, subscription, public-sharing and CardSight features involve the specific providers described below. Webzoom is the developer and data controller for the processing it determines.

2. Scanner processing on your device

• You can scan with the camera or select a saved photo.
• ML Kit optical character recognition (OCR) and visual fingerprinting run locally on your device.
• The bounded fingerprint working image has a maximum side of 900 px and is not transmitted.
• Raw OCR text is no longer retained in unmatched scan records.
• Temporary scanner files are removed on a best-effort basis.

3. Optional CardSight upload

If local identification is not enough, RareStack may offer CardSight. RareStack asks for separate consent every time. After you consent, the app creates a resized, metadata-free JPEG and uploads that image to CardSight.

CardSight may process or retain the uploaded image under its own policies. It may use the upload to operate and improve its service, and for research or training. It may also receive IP, network, request, device, software and diagnostic metadata associated with the request.

Choosing Cancel sends nothing to CardSight and does not consume a scan credit.

Before uploading, you confirm that you are at least 18, have the legal capacity and rights required for the image, and that the image contains no Sensitive Data or Personal Information about anyone under 18.

Read the CardSight Privacy Policy and CardSight Terms, together with the RareStack CardSight Upload Terms.

For CardSight privacy questions or requests concerning deletion of an uploaded image, use the contact and deletion process described in the CardSight Privacy Policy or contact privacy@cardsight.ai. RareStack support at webzoom.studio@gmail.com can help identify the appropriate route. CardSight controls its own systems and retention, so requests remain subject to its verification, legal and technical limitations.

4. ML Kit technical telemetry

ML Kit does not send the raw card image or recognized text to Google as part of its on-device recognition. ML Kit may send an installation identifier and technical metrics, including device or app information, image format and resolution, events, performance data and error codes.

5. Collection, search and public sharing

Your collection and search data are local by default. RareStack does not automatically synchronize them and does not provide automatic collection cloud backup. Direct live TCGCSV catalogue-data synchronization is disabled by default in Build 12.

Public sharing is optional. For the published share itself, RareStack sends only the card content that you select. When a signed-in user creates, updates, manages or deletes a public share, RareStack also sends a Firebase ID token to the Cloudflare Worker. The Worker verifies the UID, display-name and email claims to authenticate the request. The full email address and Firebase UID are not published in the public share.

To display card artwork, RareStack retrieves image assets only from assets.tcgdex.net and images.pokemontcg.io. Those hosts receive usual network-request metadata, such as the IP address, client or device information and requested asset URL. RareStack does not send either host a RareStack account identifier or scan photograph.

6. Accounts, sign-in and subscriptions

• Guest mode is available without creating an account.
• Firebase Authentication, Google Sign-In and Sign in with Apple are used only when you choose the relevant sign-in option. On iOS, the Google Sign-In SDK privacy manifest states that the SDK may process a phone number. RareStack requests only the email and profile scopes and does not intentionally read or store a phone number.
• Qonversion supports subscription entitlement functionality and related analytics. It may process subscription and purchase events; a Firebase UID or anonymous ID; device, app and operating-system information; IP-derived approximate country or location; product-interaction information; and performance and diagnostic information.
• Purchases are completed through Apple or Google. Webzoom does not receive your full payment-card details.
• Deleting a RareStack account does not automatically cancel an Apple App Store or Google Play subscription.

7. Account deletion and cleanup

The primary deletion method is Profile > Delete account inside RareStack. When Apple requires it, deletion begins with fresh Sign in with Apple reauthentication. The fresh Apple authorization code is kept only in memory, and required Apple revocation is completed before Firebase account deletion.

Remote account deletion is fail-closed: RareStack does not report the deletion as completed unless the required remote deletion steps have succeeded or the relevant remote records are already absent. A verified Firebase ID token is sent to the Worker for protected remote cleanup. The Worker deletes authenticated public-share content and resolves the Qonversion customer that must be deleted server-side. RareStack then deletes the Firebase account.

After remote deletion is confirmed, RareStack writes a durable, owner-scoped pending-cleanup marker before starting fallible local cleanup. If local cleanup does not finish, the marker remains and RareStack retries only that owner-scoped local device cleanup at startup. See the RareStack account deletion guide for the full sequence and separate subscription-cancellation links.

8. Advertising in Build 12

Build 12 does not contain Google Mobile Ads, AdMob or UMP. It does not request ATT or IDFA permission and does not perform cross-app or cross-site advertising tracking.

9. Service providers and safeguards

Depending on the features you choose, RareStack relies on Apple; Google, including Firebase, ML Kit and Google Play; Qonversion; CardSight; Cloudflare; Namecheap and Webzoom hosting; and the card-artwork hosts assets.tcgdex.net and images.pokemontcg.io.

Third parties that receive user data are required to provide the same or equivalent protection described by this policy, applicable law and the Apple App Review Guidelines. Their own terms and privacy notices also apply to processing they control.

10. Retention, security and your rights

We retain data only for as long as needed for the feature, security, legal compliance or dispute handling. Local data remains under the device owner’s control, subject to the cleanup behavior described above. No system can guarantee absolute security.

Subject to applicable law, you may ask to access, correct, delete or restrict personal data, object to processing, or request portability. Contact webzoom.studio@gmail.com. You may also contact the Hellenic Data Protection Authority or your local supervisory authority.

11. Changes and related pages

Material changes will be posted here with a revised date. Questions about this policy or RareStack can be sent to the support address above.