This is a translation for convenience. In case of discrepancies, the German version is authoritative.
E-mail address, display name, password (stored only as a hash), optionally a profile picture, and your chosen language. Your collections, wishlists, decks and price alerts including the cards and quantities they contain. Technical sign-in data per device (device name, device identifier, time of last use). We also evaluate IP addresses in order to detect suspicious sign-ins — this yields no more than a rough city/country indication, never GPS data. The lookup happens on our own server; IP addresses are not passed to third parties for it. If you allow push notifications, a technical device token for delivery.
Camera frames and photos you select for scanning are evaluated on your device and are neither stored nor transmitted to us. In individual cases a cropped section of an image is sent to our server for recognition, used solely for that comparison and not stored. In screenshot mode the app saves an image of the current view to your gallery; this requires write access to your photos. We do not read your gallery.
Solely for operating the app: signing in, managing your collection, sending price alerts and confirmation e-mails, detecting misuse and suspicious sign-ins, and fixing crashes. No disclosure to third parties for advertising purposes, no sale of your data.
We use the following external services as processors: Sentry (error and crash reports from the app, including device data and technical error messages) and Expo (delivery of push notifications and app updates).
Technical access logs (including IP address) are deleted automatically after 90 days. A rough location history (city/country) is kept for the last 4 weeks. Collections, decks and price alerts remain stored until you delete them yourself or delete your account. Backups are kept for up to 14 days — accounts already deleted may still be contained in them until that period ends.
For confirmation, password and price alert e-mails we use IONOS as a processor for the technical delivery.
You have the right to information, rectification, erasure, restriction of processing, data portability and objection to the processing of your data. You can delete your account at any time in the profile settings — and without the app installed at sejad.cards/delete-account. In both cases your account together with your collections, decks, wishlists and price alerts is removed permanently after 30 days (regarding backups see "Retention"). For enquiries please contact office@sejad.cards. You also have the right to lodge a complaint with a data protection supervisory authority.