Privacy Policy

In short

Sleeve reads the set code printed on a trading card using your camera, and opens the matching search page on Cardmarket in your browser. The reading happens on your device. There is no account, nothing to sign in to, and no profile of you anywhere.

Sleeve collects no analytics without your permission. Sleeve does contact its own server for updated card rules and app settings whichever answer you give, and that is the only request it makes on its own. Everything else in this policy is detail.

Your camera and your photos

The camera is used for one thing: reading the code printed on the card in front of it. Recognition runs entirely on your device, using a text recognition library that works offline — no image, frame or crop is ever uploaded, to us or to anyone else.

While scanning, Sleeve may write a small cropped image to your device's temporary cache so the recognition step can read it. Those files are overwritten as you scan and cleared when Sleeve starts. Sleeve does not use your photo library and does not ask for access to it.

Card rules updates

Sleeve does check its own server for updated card rules and app settings whichever you choose. That is how a game whose rules have broken gets fixed or switched off, and how the app knows when a version has stopped working, so it is not optional. It sends nothing about you, though like any web request the server sees your IP address.

The request carries no identifier, no analytics and nothing about what you have scanned. Like any web request it reveals your IP address and the time you made it to whoever serves the file. It runs at most a few times a day, and only when you open the app.

The legal basis is that this is necessary to provide the service you asked for: without it a game whose rules have changed would keep sending you to wrong pages until an app update reached you.

Anonymous usage data, only if you say yes

Sleeve asks once, on first launch, whether it may collect anonymous usage data.

Anonymous notes on how scanning goes: which game you picked, whether a code was read, whether the app had to guess at a character, and whether you opened the page or scanned again.

It never sends card photos, anything from the Cardmarket page you open, or anything that identifies you. There is no account and no sign-in, anywhere in Sleeve.

If you agree, the data is tied to a randomly generated identifier for the installation, never to you. Sleeve never links that identifier to a name, an email, a device id, or an advertising id, and it is not used to track you across other apps or websites. If you decline, no analytics system is started at all — this is not a switch that collects and then discards.

The legal basis is your consent. You can withdraw it at any time under Privacy in settings, which stops collection from that moment.

As of the version date on this policy, Sleeve transmits no analytics at all, to anyone, whichever answer you gave. The consent question is asked ahead of that so that nothing is ever collected before you have been asked. When collection does begin it will be to a European analytics provider, and this policy will say which one.

What stays on your device

Your game, capture mode, scan frame, control layout, page language, lens and zoom, your answer to the privacy question, a cached copy of the card rules and app settings, and a small random number used to stage config updates gradually. All of it is stored by Sleeve on your device only. None of it is transmitted, and the random number in particular is never sent anywhere — it is compared locally and nothing else.

Reset everything in settings clears all of it. Deleting the app removes it with the app.

When you open a card on Cardmarket

Sleeve never fetches, stores or shows anything from Cardmarket. It opens a search page in your own browser, and the page loads in your own session.

That means the page is loaded by your browser, not by Sleeve, using whatever session and cookies your browser already has. Cardmarket receives the search term — the card code Sleeve read — because it is in the address, along with the ordinary information any website receives from a browser. What happens after that is between you, your browser and Cardmarket, under their privacy policy rather than this one.

Sleeve is not affiliated with, endorsed by, or connected to Cardmarket.

Your rights, and the honest limit on them

Under the GDPR you can ask to access, correct, delete or export your personal data, to object to processing, and to complain to your data protection authority.

The honest part: because Sleeve collects nothing that identifies you and holds no account, there is normally nothing to look up. If you ask us to find your data, we will not be able to identify it, and the law does not require us to collect more information in order to be able to. What you can always do without asking anyone is withdraw consent in settings, and clear everything Sleeve has stored by resetting it or deleting the app.

Children

Sleeve is not directed at children and collects nothing that would identify a child, or anyone else. It does not ask for a user's age, because it has no reason to know it.

Changes to this policy

If what Sleeve collects changes in a way that matters, the version below changes with it and you will be asked the privacy question again rather than being carried over on an answer you gave to a different description. Corrections that do not change what is collected will simply update the date.

Who to contact

Bluecoon, Rok Firšt s.p. is responsible for the handling described above. Questions, or a request about your data, go to info@sleeve-app.com.