Cardboard Alpha privacy policy

Updated 24 September 2026

Your collection

Your collection and pending scans are stored on your device. If iCloud is available, the app syncs your collection and binder photos to your private iCloud database. Collection backups you export contain the records and photos described in the export. Training contributions are separate from that private collection.

Optional recognition contributions

Only after you agree, Cardboard Alpha collects cropped photos from scans you save, the predicted card, your selected card name, printing, language and finish, which fields you review or correct, capture time, app build and random grouping identifiers. Corrections to recently contributed cards can update the labels while the crop remains on the phone. Adding a card alone is treated as a suggestion, not verified ground truth. Full binder pages, collection names, quantities, prices, notes and original EXIF/GPS metadata are not sent to this service. A crop can contain background or sleeve details; avoid personal information in the frame.

Purpose and access

These examples help evaluate and train card-recognition models, including visual matching and exact-printing verification. Cardboard Alpha's authorised operators may review examples. They are stored privately with Cloudflare; they are not published, sold, or used for advertising or cross-app tracking. Random installation and capture identifiers support grouping, corrections and deletion; no Apple account identifier is attached. The hosting provider necessarily processes network information such as IP addresses to deliver and secure the service.

Retention and control

The phone keeps at most 100 cropped examples for up to 7 days; older examples expire when the app runs. The service expires uploaded examples within 90 days. Choose Stop sharing and delete contributions in Portfolio → Privacy & recognition to stop new uploads, erase local examples and request deletion of this installation's shared examples. Offline requests persist and retry when you reopen the app with Wi-Fi. Keep the app installed until deletion completes. Uninstalling does not send a deletion request. Copies of already released model weights cannot be individually edited to remove the influence of one example; removing source examples prevents their use in future training datasets. Minimal hashed revocation markers are retained to prevent deleted contributions being uploaded again. Saved collection records are never changed by training.

Optional imported price history

Imported starting values and original dates are used privately on your device to reconstruct estimated portfolio history. Separately, in Portfolio → Privacy & recognition → Price history sharing, you can agree to contribute existing and future imported estimates: printing, finish, language, condition, date, amount, currency and source app. A separate random installation capability enables grouping and deletion. No quantities, folder names, filenames, notes, photos or Apple account identifiers are sent. Up to 10,000 distinct price records are stored privately with Cloudflare for up to 90 days after receipt. They are unverified candidates: edited purchase prices and unknown providers cannot automatically become shared market quotes. Authorised operators may review them and compare independently verified evidence before publishing aggregate estimates. Choose Stop sharing and delete contributions to revoke consent and delete this installation’s contributions; offline deletion retries when the app opens online. Keep the app installed until deletion completes. Minimal hashed revocation markers prevent re-upload. Previously published aggregate estimates may remain. This choice is independent of recognition consent and never changes private collection history.

Other network requests

The app requests card images, catalogue information and market prices from Scryfall and configured price services. Those services receive the requested card identifiers and network information. iCloud is operated by Apple. Optional Mac recognition sends the selected capture to your configured local Mac. These app functions do not imply consent to shared model training.

Questions and requests

For this TestFlight beta, contact the developer through Send Beta Feedback in TestFlight. You can view your sharing choice and request deletion in the app without contacting anyone. The public policy is also available from this app’s TestFlight information and App Store listing when published.