Privacy

T-scan · last updated 10 November 2026

T-scan reads a Magic or One Piece card through your camera and tells you what it is worth. This page says exactly what it keeps, where, and for how long. It is short because the app does little.

What stays on your phone

• The cards you scan. Your list lives in your phone's local storage. It is not uploaded anywhere unless you turn on sync (see below).
• The card catalogue, downloaded once over Wi-Fi so the app can recognise a card with no network connection.

What the camera does

Frames are read on the phone. Nothing is uploaded while you point the camera at a card and the code at the bottom is readable.

When that code cannot be read — a damaged card, a reflection, a bad angle — the frame is sent to our server so the card name can be read there. That image is not stored: it is read and discarded.

A One Piece card is read on the phone too, from its code. To tell which version you are holding (regular, parallel, reprint) the app sends our server a small crop of the card, the part inside the yellow guide. That image is not stored: it is compared with the official pictures and discarded.

Your account

Signing in is handled by Clerk. The only thing T-scan reads from your account is your email address, to know whose collection is whose. We never see your password. Signing in also places a sign-in key for this phone, so you stay signed in as long as you use T-scan at least once a year; with it, the app keeps a copy of your email on this phone, to show it in Settings. T-deck stores only a fingerprint of the key, never the key itself. Signing out removes the key; “Sign out on all devices” closes the keys of every device. The last email used on this phone stays in Settings, to tell you whose cards are on it.

Sync with T-deck

If you turn sync on, the cards you mark as owned or wanted are sent to T-deck, which is our own service and uses the same account. Turn the switch off in Settings and nothing leaves the phone. Turning it off never deletes anything.

With sync on, a new account also records where you came from when you signed up: that it was in T-scan (iPhone, Android or web) and, if there was one, the short tag of the link that brought you or the name of the website that linked to us. Saved once and used only to learn which posts and links bring people (our legitimate interest; ask us and we delete it); Marco sees it in a private notice about the new account.

With sync on, your account also records that you opened T-scan, and whether in the app (iPhone or Android) or on the web, so T-deck and T-play stop suggesting T-scan to you. Only that you did, once: never when or how often (our legitimate interest; ask us and we delete it).

In One Piece the same switch is called Sync across phones. With it on, your One Piece list (the cards, the version and language you chose, your folders) is saved on T-deck's servers under your account, so your other phones show the same list. A card you remove is kept there as removed, so you can restore it from Recently deleted. Deleting your account deletes all of it.

When you tell us we got it wrong

If you tap “Not this card”, we record one line on the server: the card the app had proposed, the text it had read from the bottom of the card, the time, and the random identifier the app generates for itself. That is how a wrong reading gets fixed — every recognition bug found so far came from exactly that text.

It also sends one photo of that card — the crop inside the yellow guide, nothing around it — so the reading can be compared with what was actually printed. It is the only photo we keep.

No name, no email, no card other than the one you rejected, and no photo kept at any other time. Tap nothing and nothing is recorded.

Usage statistics

We count how T-scan is used anonymously, without storing anything on your phone: the screens you open, the features you use (for example a card recognised, a card marked as yours, the filters opened), how long the app stays open, where your visit came from (the site or link that brought you), and your type of device, screen size, language and time zone. PostHog tells visits apart with a code computed from your IP address and browser that changes every day and is not kept, so a visit is not linked to you, to your account or to your visit of the next day. Legal basis: our legitimate interest in knowing what works in T-scan and what to fix. If your browser sends Do Not Track or Global Privacy Control, or you tap Settings → Stop counting me, we do not count you anonymously. That button also turns off an “Allow” and, if you are signed in with sync on, saves “No thanks” in your account. A “No thanks” given before 25 October 2026, when this page said that nothing is sent, still means that nothing is sent.

T-scan also asks once, on a screen where you are not scanning, whether it can remember how you use it.

• If you tap “Allow”, T-scan keeps a random identifier on this phone, so the counts above are linked from one visit to the next. If you are signed in and sync with T-deck is on, this is linked to the internal number of your T-deck account, never to your email or your name. Turning sync off after “Allow” ends that link and forgets your answer: until you answer again the phone is counted only anonymously, and from then on without your account.
• If you tap “No thanks”, we keep counting anonymously as described above, and nothing links your visits. Only your answer is kept on the phone, so we do not ask again. Until you answer, we count the same way and ask again later.
• If you are signed in and sync with T-deck is on, your T-deck account also keeps your answer (only “Allow” or “No thanks”), so you are not asked again on your other phones and computers, in T-scan, T-deck and T-play: it applies there as soon as you sign in. With sync off, your answer stays on this phone.
• When you sign out, the answer is forgotten: whoever signs in next on this phone is asked again, unless their account already has an answer and sync is on. If your answer has not reached your account yet (for example you were offline), the phone keeps it, with your account's internal number, until it is saved, for at most 30 days.

We never send names, email addresses, card lists, photos or anything you type. No session recordings, no advertising.

Legal basis for remembering: your consent. You can change your answer at any time in Settings → Usage statistics; from then on we only count anonymously. If you are signed in with sync on, the new answer replaces the one in your account. A “No thanks” reaches your other devices the next time you open T-scan, T-deck or T-play on them; an “Allow” applies only on devices where you have not answered yet.

The statistics are processed on our behalf by PostHog, in its European Union cloud in Frankfurt, under a data processing agreement. Your IP address is discarded and not stored. Statistics are kept for one year, then deleted.

What we do not do

Deleting everything

Settings → Delete account, inside the app. It deletes your account, and it cannot be undone. What happens to the list on this phone depends on whose it is, and the app tells you which of these three happened:

• Your cards on this phone are gone.
• Your cards are gone. Another account's cards are still on this phone: they are not yours to delete, and signing in with that account brings them back.
• Your account is gone. Some cards on this phone were never linked to an account, so they are still here — we cannot tell whose they are, so we did not delete them.

If sync with T-deck is on, the app deletes your data there first — collection, decks, saved versions, notifications, your questions to the T-deck assistant from 20 October 2026 on and your account row — and only then deletes your account. The order matters, and this is what it buys you:

• If the deletion on T-deck goes through, the app tells you how many rows were removed, then deletes your account and clears what belongs to you on this phone.
• If the app cannot reach T-deck, or cannot confirm what happened there, it stops before touching your account. Your account and the list on this phone are both still here, and you can simply try again — deleting is safe to repeat.
• If your T-deck data is deleted but the account itself cannot be, the app says so and tells you how many rows were removed there. Your account is still yours: try again, or write to the address below. In this one case the app also clears the pending uploads and stops sending anything to T-deck, so that what was just deleted there is not sent back up on its own. Your card list on this phone is left alone. If all of that worked, you can turn sync on again in Settings whenever you want, and your cards are uploaded again from scratch. If this phone is out of space, the app cannot finish tidying up: turning sync on again may then not upload your cards, and the app says so instead of promising the upload. In that same case it may not even manage to record that sync is off — it says that too, and asks you to turn it off yourself in Settings before you reopen the app, because otherwise some of the cards you just deleted can be sent back up the next time it starts. Whenever the app says it could not finish, write to us and we sort it out by hand.

Deleting your account with sync on also deletes, on T-deck and at PostHog, the usage statistics linked to it.

Sync off means nothing is sent to T-deck now. If you used sync before, your data is still there, and so are the usage statistics linked to your account while sync was on: turning sync off never deleted them, so write to the address below to have them removed.

If you also used the T-deck assistant, your questions to it go with your account, with two exceptions that carry no name and no account: questions written before 20 October 2026, and the copy of a question it could not answer well that we keep to fix it. Both are deleted automatically 30 days after they were written.

Children

T-scan is not aimed at children under 14 and does not knowingly collect anything from them.

Your rights

You can ask what we hold about you, ask for a copy, a correction or deletion, and withdraw your consent to being remembered by usage statistics at any time. You can also object to the anonymous counting: tap Settings → Stop counting me, or turn on Do Not Track or Global Privacy Control in your browser. Because those counts cannot be linked to you, we cannot find them to delete them on request. Write to the address below. You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Changes

If this page changes, the date at the top changes with it.