Privacy Policy
Last updated 10 September 2026
Upkeeper ("we", "us") is a Magic: The Gathering collection and deck-building app available at upkeeper.tech and as an iOS and Android app. This policy explains what data we collect, why, and the choices you have.
What we collect
- Account details — your name, email address and a hashed password when you register.
- Your content — the cards, collections, decks, folders and notes you add, plus friends and sharing links you create.
- Camera images — when you use the card scanner, frames from your camera are processed to identify cards. On the mobile app this happens on your device where possible; otherwise a cropped image of the card is sent to our server and to Google Cloud Vision for text recognition. Images are not stored after recognition.
- Camera and microphone streams — when you join a play table, your video and audio are streamed to the other players in that room via LiveKit. Streams are not recorded.
- Biometric sign-in — if you enable Face ID, Touch ID or Android biometrics, the check is performed by your device. We never receive or store biometric data.
- Technical data — standard server logs (IP address, browser or device type, timestamps) used to keep the service running and secure.
What we don't do
- We do not show ads or use advertising SDKs.
- We do not use third-party analytics or tracking.
- We do not sell or rent your personal data.
How we use your data
To provide the service: storing your collection and decks, identifying cards, pricing and set data via Scryfall, running play tables, sending transactional email (such as password resets), and keeping your account secure.
Third-party services
- Scryfall — card data, images and prices.
- Google Cloud Vision — card title recognition for scans that can't be read on-device.
- LiveKit — real-time video and audio for play tables.
- Resend — transactional email.
Each of these providers receives only the data needed to perform its function.
Sharing
Decks and collections are private unless you create a share link or accept a friend request. Anyone with a share link can view the shared content until you revoke it.
Data retention and deletion
We keep your data while your account is active. To delete your account and all associated data, follow the steps on our account deletion page. Requests are completed within 30 days.
Security
Data is transmitted over HTTPS and passwords are stored hashed. No system is perfectly secure, but we take reasonable steps to protect your information.
Children
Upkeeper is not directed at children under 13 and we do not knowingly collect data from them.
Changes
We may update this policy from time to time. The date at the top shows the latest revision.
Contact
Questions about this policy: yendallmax@gmail.com