Privacy Policy
This Privacy Policy explains how the ScanDex mobile application ("ScanDex", "the app", "we", "us") collects, uses, stores, and protects your information. ScanDex is operated by SandboxxGaming. By using the app you agree to the practices described here.
1. Information we collect
Information you provide
- Collection data — the cards you scan or add, quantities, variants (holo / 1st edition), binders, wishlists, favourites, prices, and any for-sale listings you create.
- Card photos — photographs you take of your cards within the app.
- Profile details — a collector name and an optional profile photo you choose.
Information collected when you sign in
- Google account information — if you choose to sign in with Google for cloud backup, we receive your name, email address, and a unique account identifier through Google / Firebase Authentication. We use this only to identify your backup.
Information collected automatically
- Basic app analytics — we use Firebase Analytics to understand general, aggregated usage (for example, how often features are used) so we can improve the app. This does not identify you personally.
- Camera — the app uses your camera to scan cards. Camera frames are processed on your device for text recognition and are not transmitted to us unless you save a photo and choose to back it up.
2. How we use your information
- To identify scanned cards and maintain your collection on your device.
- To calculate collection values and show market prices.
- To back up and restore your collection when you sign in and request it.
- To operate paid features (ScanDex Pro and ScanDex Cloud) through Google Play Billing.
- To understand aggregate usage and improve the app.
3. Where your data is stored
Your collection lives on your device by default. When you sign in and use cloud backup, a copy of your collection data and your card photos is uploaded to servers operated by SandboxxGaming (hosted with DigitalOcean) and is associated with your account identifier so only you can restore it. Sign-in is handled by Google / Firebase Authentication.
4. Payments
Purchases of ScanDex Pro and ScanDex Cloud are processed by Google Play Billing. We do not receive or store your payment card details. Google's handling of payment information is governed by Google's own privacy policy.
5. Third-party services
ScanDex relies on the following third parties, each governed by its own privacy policy:
- Google / Firebase — authentication, analytics, and crash reporting.
- Google Play Billing — in-app purchases.
- Card price providers — market price data is retrieved from public trading-card price APIs.
6. Data sharing
We do not sell your personal information. We do not share your collection or photos with other users except information you deliberately choose to share (for example, a for-sale list you encode into a QR code and show to another collector). We may disclose information if required by law.
7. Data retention & deletion
Collection data stored on your device remains until you delete it or uninstall the app. Cloud backups are retained until you delete them. You can:
- Reset your collection within the app (Settings → Local data → Reset), which removes local data and photos.
- Request deletion of your cloud backup and associated account data by emailing us (see Contact below). We will delete it within 30 days.
8. Children's privacy
ScanDex is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will remove it.
9. Security
We take reasonable measures to protect your data, including authenticated access to cloud backups so that only your signed-in account can retrieve them. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through an in-app notice.
11. Contact
For privacy questions or data-deletion requests, contact us at:
[email protected]