Privacy Policy

The short version

Mintproof keeps your collection on your phone. If you create an account, it also keeps a copy of your binder with that account, so a lost or replaced phone does not lose it and you can open it on another device. It sends a card photo away only when you ask it to identify one. There are no adverts and no third-party trackers. It does report crashes and anonymous usage counts so we can tell when something is broken, and there is a switch to turn that off in Profile → Your data.

What the app collects

• Card photos, one at a time. When you scan — from the camera or from your photo library — that single image is sent to our server and on to our recognition provider, TCGAPIs, to identify the card. It is used for that identification, is not stored by us afterwards, and is never published or sold. Nothing is sent until you press the shutter or pick a photo.
• An email address, only if you make an account. Sign-in is handled by Google Firebase Authentication. You can use every part of the app without an account.
• Your binder, only if you make an account. The cards you saved (card, printing, condition, grader, quantity and the value shown), your portfolio names and your want list are backed up to our server under your account, so they come back after you sign in on a new phone. Guests' binders are never uploaded. Your scan history, theme and currency are not part of the backup.
• Crash reports and anonymous usage counts. When the app crashes we receive the error and the line of our code that caused it. Separately, we count what happened — the app opened, a scan succeeded or failed and how long it took, a screen was viewed, a search returned results, the paywall was shown. Every one of these is an event name, a screen name and a number.
  
  Alongside each one, our analytics provider records your phone model, its operating system version and its screen size. Nothing else about the device.
  
  What is never in them: the cards you scanned, own or searched for, what anything is worth, your photos, your email address, or your account id. That is not a promise about our intentions — the app carries a fixed list of the events and fields it is allowed to send, and anything else is dropped before it leaves your phone.
  
  No IP address and no location. Analytics providers normally store the IP address of every event and turn it into a city, a postcode and a latitude and longitude. We checked that this was happening, and switched both off — IP storage and the location lookup — so those fields are not recorded against you at all.
  
  You can turn this off in Profile → Your data → Anonymous diagnostics. Off means off: no crash reports and no usage events leave the device from that moment.

That is the entire list. There is no age, no location, no contacts, no device fingerprint and no advertising identifier.

What stays on your device

Your scan history, your theme and your currency are stored only on the device you are using. As a guest, so are your collection, portfolios and want list: they are not uploaded and they go with the app if you delete it — export your collection as a CSV from Settings first if that matters to you. With an account, those three are kept on the device and backed up as described above. Signing out clears them from that phone; signing back in brings them back.

What it does not do

• It does not sell your data.
• It does not track you across other apps or websites for advertising.
• It does not record your screen or your session, and it does not read what you type.
• It does not attach a name, an email or an account id to a crash report or a usage event, and it does not put the contents of your collection in either. The binder backup goes only to our own server, and only for an account.
• It does not list, sell, or trade your cards for you.
• It does not read your photo library. It receives only the single image you pick.

Who else touches your data

• TCGAPIs — receives card photos for recognition, and supplies the raw prices, per-condition sale data and card catalogue shown in the app.
• PriceCharting — supplies graded prices (PSA 10 and the grade ladder). It receives a card name and set to look a price up. It receives nothing about you.
• Google Firebase — hosting; and, if you create an account, authentication and the storage that holds your binder backup.
• Firebase Crashlytics — receives crash reports: the error, our stack trace, the device model and the app version. Same Google project as sign-in and hosting, so it is not an extra company holding your data. Only while diagnostics are on — collection is switched off in the build itself and turned on by that switch, not the other way round.
• PostHog — receives the anonymous usage counts described above. Only while diagnostics are on.

Nobody else. The app carries no advertising SDKs and nothing that follows you to another app or website.

Deleting your data

As a guest, your collection is only on your device: clearing the app’s data or deleting the app removes it. If you made an account, Profile → Delete my account removes your sign-in, your email and your binder backup permanently and clears the binder from that phone, from inside the app, without emailing anyone. If you cannot open the app, request deletion here — the same data, deleted within 30 days.

Children

Mintproof is a pricing tool for collectors and is not directed at children. It does not knowingly collect personal information from anyone under 13. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If what the app collects changes, this page changes with it and the date at the top moves. We will not quietly start collecting something this page says we do not.

Contact

Questions about your data: support@mintproof.cards

Before submission: this address now receives mail and forwards to the team. Send a real test message and confirm it arrives before submitting — App Review rejects a contact that does not receive mail, and a forwarding rule that looks correct in a dashboard is not the same as one that has delivered something.

A note on this document

This policy states plainly what the software does, checked against the code rather than adapted from a template. It is not legal advice and has not been reviewed by a lawyer. Before store submission it needs review for the jurisdictions the app will be sold in — in particular the age threshold above, which differs between the US, the UK and the EU, and whether a UK/EU release requires a named data controller and a lawful basis stated for each item collected.

← Back to Mintproof