Privacy policy

What we collect

Accounts and online play

When you create an account, we receive your username, display name, password and starter faction. We assign an account ID and store password and recovery-code hashes, session information and account activity. Email is not required to register. Do not use your real name if you do not want other players to see it.

Online features store your profile bio, showcase and wishlist; owned cards and decks; barcode digits and scan rewards; friends, friend requests and blocks; direct messages; trades; matchmaking, invitations and match actions/results; campaign opponents, progress, unlocked table atmospheres and saved matches; and earned scan-credit balances and award/spend records. If you choose cloud saving, we also store the practice game and preferences you save. These records include identifiers, timestamps and retry receipts used to process actions reliably.

Player progress and feedback

For signed-in play, our own service records active days, tutorial starts/completions/skips, camera-opening failures, scan and deck-save milestones, queue joins/leaves, and campaign starts/results. These records are associated with your account and help us measure onboarding, returning players and difficulty. Client tutorial and camera signals are reports from the app, not authoritative game results. We do not collect guest tutorial analytics or add third-party analytics SDKs.

If you send in-app feedback, we store your category, text, account ID, submission time, retry receipt and handling status. Basic diagnostics are optional and off by default: app version/build, platform (web, Android or iOS), current game screen and connection status. No screenshot, camera frame, barcode, message history or device identifier is attached. Feedback is private to authorized Augmere operators. Please do not submit passwords, recovery codes or other private information.

Community safety

We record the community-rules version you accept and its acceptance time. If you report a player or message, we store the reporter and reported account IDs, the reason, your optional details, a copy of the relevant profile and any reported message, the report status and a retry receipt. Authorized operators review this evidence and record moderation actions, reasons and restriction periods. The reported player cannot access the report or reporter identity through the app.

Camera and local saves

Camera access is optional. Barcode recognition happens on your device; images and video are not uploaded or retained by our servers. You can type barcode digits instead. We do not access your microphone, address book or device location. Product barcodes are used to generate game rewards, not to verify purchases.

Preferences, practice saves, tutorial progress, historical offline campaign saves, login tokens and pending actions can be stored on your device. The current campaign saves its matches, progress and earned credits on our servers. Local data stays there unless an online feature sends it to us or you choose to save a cloud copy. The app does not include advertising identifiers or third-party advertising, analytics or crash-reporting SDKs.

Connection and support information

Our servers receive IP addresses and technical request information, including time, requested path and query, response status, browser/app information and any referrer supplied. This can include player-search terms in request URLs. Server error logs can contain diagnostic details. We do not derive your location from your IP address.

To limit automated account creation, we keep a daily counter keyed by a secret-hashed network address (an IPv6 network prefix where applicable). These counters do not include usernames or raw IP addresses. They expire from the live database within two days; backup copies expire within 15 days. Account age, reveal times and trading allowances also help prevent collection abuse. Aggregate service metrics measure request counts, latency, errors and resource usage without account IDs or message content.

If you email support, we receive your email address and whatever information you include, such as a username, device details, a problem description or correspondence. Please do not send passwords, recovery codes or unrelated sensitive information.

How we use information

We use account and game data to sign you in, recover and secure your account, maintain collections and saves, award scan rewards and campaign credits, connect players, deliver messages, process trades and run matches. We use technical information to operate and diagnose the service, understand reliability, prevent abuse and limit excessive requests. Support information is used to respond to your request and investigate problems. Player milestones and feedback also help us improve usability, campaign difficulty and reliability.

We do not use your information for targeted advertising or sell or rent it. The app currently has no purchases or payment processing.

Who can see information

Other signed-in players can find your username, display name and profile, including the bio, showcase and wishlist you choose to publish. Friends and other participants receive information needed for invitations, trades, presence and matches. Direct messages are shown to the sender and recipient in the app.

Messages are not end-to-end encrypted. They are stored on our servers and can be accessed by authorized operators when needed to provide support, maintain the service, investigate abuse or comply with law. A recipient can also copy or share what you send.

We use service providers for hosting, infrastructure and email to process information on our behalf. We may disclose information when reasonably necessary to comply with legal obligations, protect people and the service, or respond to security incidents. If the service changes ownership, relevant information may transfer with it, subject to applicable requirements and notice. Processing may take place outside your country.

How we protect it

App-to-server connections use HTTPS encryption in transit. Passwords and recovery codes are stored as hashes, and account operations use authenticated sessions. Access controls, request limits and backups help protect the service. No system can guarantee absolute security; keep your password and recovery code private.

Retention and deletion

We retain account and game data while your account exists to provide ongoing play. You can request permanent deletion in Account → Delete my account or use the browser account-deletion page. You must confirm with your username and password or recovery code. Deletion is completed immediately in the live game database after successful confirmation.

Deletion removes your profile, login sessions, owned cards, decks, scans, cloud saves, friends and blocks, messages sent or received, trades and matches involving your account. Cards already traded to someone else remain theirs. Copies another person made outside Scanside cannot be removed by us.

Detailed player analytics, daily activity records and in-app feedback are removed from the live database after 90 days. Account deletion removes them immediately; backup copies may remain for up to 15 additional days. Functional first-adventure progress (tutorial choice, guide visibility, first scan and deck edit) stays with your account until deletion.

Safety reports and their evidence are removed from the live database after 90 days. Associated moderation audit records are removed with the report. Deleting either involved account also removes the report and its audit records. Active restrictions and rules acceptance remain while the account exists; expired restrictions are cleared. Backups can retain these records for up to 15 additional days.

Database backups expire within 15 days. A minimal deletion record containing a hashed receipt, hashed username, account ID and deletion time is kept for 30 days, plus up to 15 days in backups, to make retries safe and prevent restoration of deleted accounts from backups. It does not retain your profile, messages or game content.

Operational access and error logs are separate from the game database. They rotate under our server log policy and are not individually erased by account deletion; copies may remain where needed for security, troubleshooting or legal obligations. Support correspondence is retained as needed to resolve requests and meet security or legal obligations. You can email us to request deletion of support information or other data; we will explain any applicable retention requirement.

Account deletion also clears the deleted account’s campaign, tutorial and pending-action data on the device performing it. Unrelated local practice saves and preferences may remain, and other devices may retain local data. Clear the app’s storage or the browser’s site data to remove local copies. Uninstalling the app alone does not delete your online account.

Your choices and requests

You can play offline practice without an account, decline camera access, edit your profile, report or block players and delete your account. You can revoke camera permission in your device or browser settings. Clearing local storage can remove unsynced progress, so save anything you want to keep first.

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your information, restrict or object to processing, or complain to a privacy authority. Contact us to make a request. We may need to verify account ownership, but will never ask you to email your password or recovery code. Parents or guardians with questions about a child’s information can contact the same address.

Policy updates

We will update this page and its effective date when our practices change. Where required, we will provide additional notice of material changes.

Contact Augmere LLC

For privacy questions, data requests or support, email developer@augmere.studio. Include “Scanside TCG” and your username if relevant. See our support page for account and device help.