Skip to content
CardNugget

Privacy policy

CardNugget is designed to process everything it can on your iPhone and to send as little as possible. This page describes exactly what happens.

Last updatedOct 2, 2026

In short

  • Cards are read and identified on your iPhone. No photo is ever sent.
  • To get a price, the app sends a catalog identifier, or failing that the text read on the card.
  • Your collections stay on your iPhone. There is no account.
  • No advertising, no analytics, no tracking, no third-party code.

1. Camera

The app asks for camera access only to detect and read the cards you show it. Images are processed in memory on the device and are neither sent nor kept — except an optional thumbnail, off by default, saved only on your iPhone if you enable it in the settings.

2. What is sent to our server

When a card is identified on the device, the app sends its catalog identifier to obtain a dated price.

If the embedded catalog cannot settle between candidates, the app sends instead the text read on the card: collector number and, when available, card name, set name, set total, set code, language and variant. This describes a printed card, not you.

To display a card's visual and game data, the app sends its catalog identifier; our server fetches the visual from the public catalog and returns it. Your device never contacts that catalog directly.

3. Technical data and server logs

Like any Internet request, each request reveals your IP address to our server. It is used to run the service and to protect it against abuse (rate limiting).

Our server logs currently record, for diagnostics, the client IP address together with the card information of the request. The server is self-hosted by the publisher; logs are not sent to any third-party platform.

4. What is stored on your iPhone

Your collections — cards, quantities, estimated prices with source and date, scan dates — are stored only on your iPhone. You can delete any card or collection from the app, and uninstalling the app deletes everything. There is no cloud sync.

5. What we do not do

No user account, no location, no advertising, no advertising identifier, no analytics, no sale or sharing of data for commercial purposes. The app contains no third-party SDK.

6. Price sources

Prices are estimates from third-party market data, shown with their date. Requests to these sources are made by our server, never by your device, and contain nothing about you.

7. This website

This site uses no cookies, no analytics and no third-party scripts. It stores a single preference in your browser — the theme you choose — and only if you choose one. Like any website, the server and its network provider see your IP address when you load a page.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of data concerning you. As your collections stay on your device, most of these rights are exercised directly by deleting data in the app. For anything else, contact the publisher (see the legal notice). You may also lodge a complaint with a data protection authority, such as the CNIL in France.

9. Changes

Any change to this policy is published on this page with a new date. If a future version introduces accounts or synchronisation, this policy will be revised before those features are switched on.