Privacy

The short version

Deckhand keeps your email address and a list of which cards you own. It has no analytics, no advertising, no trackers, and no third-party SDKs collecting anything. Photographs taken by the scanner never leave your phone. You can delete everything at any time, from inside the app.

What is stored

• Your email address and password. Handled by Supabase Auth. The password is stored only as a hash, and Deckhand never sees it in a form it could reuse.
• Your collection. Which cards, how many of each, when the row last changed, and whether it arrived by hand, by scan or by import.
• Decks you save or mark as built. A reference to a deck in the public corpus, and which of those two it is.
• Scan sessions. The cards counted in a batch, until you commit or discard it.
• A per-account usage count, so tier limits can be enforced.

That is the entire list. There is no field for rarity, set, condition, purchase price or where you bought anything — not as a privacy measure but as a product decision, and the effect on privacy is the same.

What is not stored

• Photographs. The scanner reads the card’s name on your device and sends only the text it read. Each captured frame is deleted immediately after it is read. No image is uploaded, and none is kept.
• Location, contacts, calendar, photo library, microphone. The app asks for none of them and has no code that could use them.
• Advertising or analytics identifiers. There is no analytics service in this app at all.

Who else sees it

Supabase hosts the database and the authentication service, so your account and your collection are stored on their infrastructure. They are a processor: the data is not theirs to use.

Card images come from YGOPRODeck, and they are fetched by this server rather than by your device — so browsing the app does not tell them anything about you.

Nothing is sold, and nothing is shared with anyone else. There is no third party receiving a copy for any purpose.

Server logs

Requests are counted per account, and per network address where there is no account yet, so that the service cannot be overwhelmed by one caller. Those counters live in memory, are never written to a database, and are gone when the server restarts.

Deleting your account

Open your account page on the web, or tap Account in the app and choose Delete account. It is immediate and it is permanent: your collection, your saved decks and your scan sessions are removed along with the login, and there is no copy kept and no recovery window.

Children

Deckhand is not directed at children under 13 and no account is knowingly created for one.

Contact

Questions about any of this go to ygodeckdisc@gmail.com.

Trademarks

Yu-Gi-Oh! and all associated names are trademarks of their respective owners. Deckhand is an independent tool for organising a collection you already own. It is not produced, endorsed by, or affiliated with them, and it sells no cards.