What leaves your phone

All of it stays on the device, in the app's own private storage.

Nothing in this list is transmitted anywhere by Foilio. Uninstalling the app deletes all of it — Android removes an app's private storage with the app, so export a backup first if you want to keep your collection.

To be explicit, because “we take your privacy seriously” is not information:

• No account, email address, name or phone number. The app never asks for any of them. The one place Foilio has a box for your address at all is the optional suggestion form on the web site, and it is covered below.
• No analytics, telemetry, crash reporting or usage statistics. There is no code in the app that reports how you use it, because there is nowhere for it to report to.
• No contacts, location, calendar, files, microphone or call data.
• No advertising profile built by us. We never see AdMob's data; Google serves the ads and reports us a number.

CAMERA

Recognising a card you hold up. Frames are processed on the device and discarded; nothing is written to storage or uploaded. Declining it leaves every other part of the app working.

INTERNET

Three things: loading card images from Scryfall while you browse, checking whether a newer card database has been published, and requesting ads. With no network the app still opens, searches, scans and files cards.

VIBRATE

The confirmation tap when a card is recognised.

AD_ID

com.google.android.gms.permission.AD_ID — lets AdMob read the device's advertising ID. Present because the app serves ads.

There is no storage permission: backups are handed to Android's own share sheet and imports come through Android's file picker, so Foilio only ever sees the one file you pick.

Four occasions, and no others.

1. Card images, from Scryfall

When you browse cards, thumbnails are loaded from scryfall.com. Scryfall receives the request — which means your IP address and which card image you asked for — and their privacy policy applies to it. Foilio stores image URLs, never image files. Scryfall's policy.

2. The card database update check, from GitHub

Foilio asks a small file on raw.githubusercontent.com whether a newer card database exists. The request carries your IP address and nothing about you or your collection. GitHub's privacy statement applies. A download never starts on its own — a new card database is around 34 MB and always needs a tap.

3. Ads, from Google AdMob

Free version only. Covered in its own section below.

4. The purchase, through Google Play

Only when you tap to buy Foilio Pro or to restore a purchase. Google Play handles the entire transaction; Foilio is told only whether you own the product. No payment details ever reach this app — it cannot see your card number, and does not ask for one.

Notably absent: card recognition. The scanner never calls Scryfall or anything else. It matches against the database already on the phone.

The free version of Foilio shows a banner at the top of the screen and, when you choose to watch one for ten extra scans, a full-screen ad. Both are served by Google AdMob. The full-screen ad only ever appears after you tap a button asking for it.

To serve an ad, Google may collect and process

• the device's advertising ID (a resettable identifier — Android Settings ▸ Privacy ▸ Ads lets you reset or delete it);
• device and app information — model, operating system version, app version, language, coarse region;
• your IP address, from which Google infers approximate location;
• ad interactions — which ads were shown, viewed or tapped.

Google uses this to select ads, to measure them, and to prevent fraud. Depending on your consent and your region, it may be used for personalised advertising. We do not receive any of it, and we do not send Google anything about your collection — Foilio does not have a user identifier to send.

• Google's advertising policy
• How Google uses data from partner sites and apps

Consent

In the EEA, the UK and Switzerland, Foilio shows Google's own consent form before requesting its first ad, and your answer is stored on the device. You can change it at any time: Settings ▸ Ad privacy options. Where that row is not shown, it is because the consent framework reports that no consent is required in your region.

Turning ads off entirely

Buy Foilio Pro. With Pro, no ad is ever requested, the ad SDK makes no ad calls, and the banner is removed from the layout rather than left blank.

Foilio Pro is a one-time purchase (product id foilio_pro_unlock), not a subscription. It removes the free plan's limits and all ads.

The purchase is processed by Google Play Billing. Google receives and handles everything about the payment; Foilio receives a yes or no and remembers it on the device. Google Play's terms and privacy policy govern the transaction, the receipt and any refund.

Because the entitlement is remembered on the device and there is no account, “Restore purchase” on the Foilio Pro screen is how a reinstall or a new phone gets the unlock back. It asks Google Play what your Play account already owns. It never charges again.

Foilio can export your whole collection as a single file, and can import one back. Both are entirely under your control:

• an export is handed to Android's share sheet. Where it goes — Google Drive, email, a messaging app, local storage — is your choice, and Foilio has no visibility into it and does not keep a copy;
• an import comes through Android's file picker, so the app can read only the one file you select.

A backup file contains your collection in plain, readable JSON. It is not encrypted. Treat it like any other document: if you would not post it publicly, do not put it somewhere public.

Backups do not include the card database (it ships with the app), your settings, or the day's scan count.

This policy is about the app, and everything above is true of the app. The web site is a separate thing and collects two of its own, so they are set out here rather than left implied.

Visiting the site

foilio.cc is three static pages hosted on Cloudflare Pages. There is no analytics script, no advertising and no cookie set by us — the site sets no cookies at all. Cloudflare, as the host, logs requests the way any web server does: your IP address, the page asked for, the time and the browser's user agent, kept for its own security and diagnostics. The only other request a page makes is to Google Fonts for the two typefaces.

The suggestion form

The form on the landing page sends what you write to a Worker at api.foilio.cc, which turns it into one email to the developer. Then it forgets it. There is no database behind the form, no mailing list, and nothing is kept anywhere but that inbox.

What is sent

The message you typed, the email address you typed if you chose to type one, and the country your request came from — which is in the mail because “this only happens in one region” is the first question a bug report raises. Your IP address is not put in the email.

Leaving the address blank

Then the message is anonymous, and there is no way to reply to it. That is a supported way to use the form, not an oversight.

What it is used for

Reading, and replying if you asked for a reply. It is never added to a mailing list, never used for marketing and never passed to anyone.

How long it is kept

As long as the email sits in the inbox. Ask, and it is deleted.

The spam check

The form is protected by Cloudflare Turnstile, which decides whether a browser is a person rather than asking you to identify a bicycle. It sees your IP address and characteristics of the browser; Cloudflare states it does not use that data for advertising and does not track you across sites. Cloudflare's privacy policy.

Who carries the mail

Cloudflare, through its own mail transport, to an address verified on the account. No third-party mail service is involved.

Nothing here touches the app. Your collection is not involved, the app never contacts api.foilio.cc, and using the site is not a way of being identified inside Foilio — there is still no account to be identified as.

Foilio is not directed at children and is rated for a general audience. It does not knowingly collect personal information from anyone, of any age. In the Play Console it is declared as not primarily child-directed; ad content is requested with Google's standard content settings.

Because Foilio holds no data about you on any server, the usual requests have unusually direct answers:

Access or export

The backup export produces everything the app holds.

Deletion

Uninstalling the app deletes it all. Within the app, any container, deck, card or wish can be deleted individually.

Advertising data

Held by Google, not by us. Reset or delete the advertising ID in Android Settings ▸ Privacy ▸ Ads, change your consent in Foilio's Settings ▸ Ad privacy options, or use Google's own controls at myadcenter.google.com.

Purchase records

Held by Google Play; managed from your Play account.

There is no request to send us, because there is nothing on our side to act on.

Card names, text, images and prices come from Scryfall (scryfall.com), used with attribution as their terms require. Prices are a dated estimate from a Scryfall bulk dump, not a valuation.

Foilio is unofficial Fan Content permitted under the Fan Content Policy. Not approved/endorsed by Wizards. Portions of the materials used are property of Wizards of the Coast. ©Wizards of the Coast LLC.

If this policy changes, the date at the top changes with it, and a material change will be noted in the app's release notes. The current version is always the one published with the app.

Questions about this policy, or about Foilio: the suggestion box on the website. It reaches the person who wrote the app, and nobody else.

Put your email address in the box if you want a reply — leave it out and the message is anonymous. It is also the route for asking that a message you sent be deleted.

Foilio’s Google Play listing carries a developer email address as well, which Play publishes and requires; either reaches the same person.