Privacy & your collection

Updated October 12, 2026. Applies to iOS version 1.0 build 5 Android version 1.0 alpha 3, and the device-storage web demo.

Roster & Rarity stores cards, photos, purchase costs, notes and comparable sales on your device. No app account is required. By default the app does not send your collection to our server. The app does not collect analytics or show ads.

Card scanning

The native camera opens only when you choose a capture action. Captured photos are not automatically saved to your photo library. Price-check photos stay in temporary app memory unless you choose Save as collection draft; operating-system camera temporary files may remain until cleaned up. Opening a sold-search link sends the confirmed search terms to eBay.

English text recognition runs on your device using bundled OCR software and language data. Card photos are not sent to an OCR service. Scan drafts, resized photos, and recognized text stay in your local collection and are included in exported files or cloud snapshots only when you choose to back up. OCR suggestions need human review.

Optional cloud backup on Gandalf

Opening cloud backup enables a separate email/password backup account. We store your email and account identifier for authentication; confirmation and recovery email are delivered through Resend. Passwords are handled by Supabase Auth. Native sessions use iOS Keychain or Android Keystore-backed encrypted storage; web sessions use browser storage.

Only pressing Back up now uploads a snapshot of your cards, photos, costs, notes and comparable sales to the private Supabase server on Gandalf, through Cloudflare. Backups are accessible only to their account. They are not live synchronization. Restore downloads a snapshot and merges it into local storage. Signing out leaves your local collection intact. Cloud backups remain until you delete them or delete the backup account.

Delete individual snapshots or the entire cloud account in the cloud-backup section. Account deletion also deletes data from the earlier cloud demo but leaves local device data and exported files unchanged. Private server recovery backups may retain deleted data for up to 9 days. Authentication and hosting systems retain operational logs.

Optional file exports

Export creates a file containing your collection and photos. On iPhone you may choose Save to Files and select On My iPhone, iCloud Drive, or another configured provider. File exports are separate from optional server backups. Nothing is uploaded by the app automatically. Your selected provider handles the file under its own policies. Backup files are not password-encrypted by this app; keep them private. Imports restore a snapshot and merge matching card IDs. Backups do not automatically sync changes.

Local storage & deletion

Android stores the collection in private app files with automatic system backup and transfer disabled by the app. Clearing Android app data or uninstalling removes these files. Use export/import or optional manual cloud backup to move your collection. The iOS collection is stored in private app files excluded from automatic iCloud backup. Clearing Safari data does not remove these files. Deleting the app or losing the device can lose the collection unless you keep an export. Delete this device’s collection in Backups & data to remove active records and photos. Exported backups remain wherever you saved them and must be removed separately.

The web demo uses this browser’s IndexedDB. Clearing website data may erase the web collection. Collections on separate devices, browsers or domains are independent.

External services

Opening marketplace links sends your chosen search terms to that marketplace. Loading the web demo or this policy uses Cloudflare hosting and its operational network logs. Fonts are bundled locally. The native collection works offline; external research and cloud file providers need a connection.

Earlier cloud demo

Earlier builds used account-backed storage on our Supabase server. Switching to this version does not delete or automatically copy those records. Export from the earlier cloud demo and import here to move a collection. Its account deletion controls remain available in that earlier version.

Contact

Taylor Emery / Emery Tech Solutions
taylor@emerytechsolutions.com