Privacy policy
Quickdraw Card Scanner ("Quickdraw", "we") is a free card scanner for trading card games, available at www.quickdraw.cards and as an Android app. This policy covers both. In short: your camera never leaves your device, you can use Quickdraw without an account, and if you do sign in we keep only your collection and decks so they sync between your devices.
Camera and photos
Card recognition runs entirely on your device. Camera frames, photos and videos you scan or upload are processed locally and are never sent to us or anyone else. If you choose to save or share a video (for example a pack-opening video), it is saved to your device or shared through your phone's own share menu, at your request.
Using Quickdraw without signing in
Your collection, decks, scan history and settings are stored only in your browser's storage on your device. We do not receive them. Clearing the app's data or uninstalling the app deletes them.
Signing in with Google (optional)
If you sign in, we use Google Firebase Authentication. We receive your Google account's user ID, name, email address and profile picture. The name and picture are shown in the app; we do not use your email to contact you.
To sync between your devices, we store the following in Google Cloud Firestore, linked to your account:
- your collection: card IDs, printings, rarities, conditions, editions, counts and the dates you added them
- your saved scanning sessions and your collection's value history
- the decks you build in the deck builder: their names, cards and chosen banlist
- your chosen currency, and random identifiers for each of your devices (so changes merge correctly)
Only you can read or change this data. We do not sell it, share it, or use it for advertising.
Prices
To show prices, Quickdraw requests card prices by card ID from our own server and from YGOPRODeck, and exchange rates from Frankfurter. To draw your value history, the app sends the list of card IDs in your collection to our server. These requests contain no account or personal information, and we do not store them.
Card search for apps and AI assistants
Quickdraw's Yu-Gi-Oh! card search is also open to other apps and AI assistants at quickdraw.cards/api. It receives only the question or card name it is asked about, needs no account, and answers with card names. Questions travel in the web address, so our host's request logs and its cache of answers hold them for a short time (up to about a week); we don't store them anywhere else or link them to anyone.
Card images and data
Some card images load from public card databases (for example Scryfall, the Pokémon TCG API, TCGplayer and YGOResources). As with any website, those servers see your IP address when your device loads an image. Importing a deck from a YGOPRODeck link sends that deck's number to YGOPRODeck.
Analytics
We use Vercel Web Analytics to count visits and how features are used (for example, that a card was scanned in a particular game, or that a match was corrected in Review), and to count problems: the first 100 characters of an error message, where in Quickdraw's code it happened and the app's version, or that saving, syncing, sign-in or a price download failed. It never includes pictures, card names or your collection. It uses no cookies and no identifier that follows you across sites, and we cannot identify you from it.
Feedback
If you send feedback from the app, we receive your message, the topics you picked and, only if you enter it, your email address so we can reply. Unless you untick "Include technical details" we also receive Quickdraw's version, your device and browser, the scanner's status, and its last few events (such as how many cards a scan found) and error messages; the form shows exactly what before you send it. Feedback never includes pictures, your cards or your collection. A message you haven't sent yet is kept only in your browser until you send or clear it. Sent feedback is stored as a private issue on GitHub, read only by us, and deleted on request.
Service providers and logs
Quickdraw is hosted by Vercel, and sign-in and sync are provided by Google Firebase. Like any web service, they may keep short-lived technical logs (such as IP addresses) to run and secure their services. We use no advertising and no crash-reporting services.
Keeping and deleting your data
Data on your device stays until you delete it. Synced data stays while you have an account. You can delete your collection at any time in the app.
To delete your account and all synced data, email responselab.surveys@gmail.com from the Google account you signed in with, with the subject "Delete my Quickdraw account". We delete it within 30 days and confirm by email. Your decks are deleted with it. Signing out removes the synced copy from that device.
Children
Quickdraw is not directed at children under 13, and we do not knowingly collect personal information from them. Children can use Quickdraw without signing in, in which case nothing about them reaches us.
Changes
If this policy changes, we will update it here and change the date at the top.
Contact
Questions or requests: responselab.surveys@gmail.com
Something not right with the app, or an idea? Send feedback.