← Foilio

Privacy Policy

Last updated 24 July 2026

Foilio is built to work on your device by default. We do not run ads, and we never sell your data. This page explains, in plain language, exactly what is collected, why, and what control you have. Foilio is an independent, unofficial fan project.

The short version

The card scanner

When you scan, your camera runs in your browser. To identify the card, Foilio analyzes the frame and sends only what is needed to match it (a compact visual fingerprint or the card crop) to our matching service, which compares it against a catalog of known printings and returns the closest matches. Scanned images are not stored, logged, or used for anything other than returning your result. Your camera is only ever active while you are on the scan screen.

Your collection and settings

Cards you add, your watchlist, cost basis, table-tool state and preferences are saved in your browser’s local storage on the device you use. If you never sign in, that data never leaves your device, and clearing your browser data removes it.

Optional accounts and sync

You can create an account to keep your collection in sync across devices and to carry Pro with you. Sign in is by email magic-link, Google, or Discord, handled by our authentication provider (Supabase). If you sign in, we store your account email and your synced collection data against your user id, protected so only you can read it. You can request deletion at any time (see Your rights).

Payments (Pro)

Foilio Pro is billed through Stripe. When you subscribe, you enter your card details on Stripe’s secure checkout, not on Foilio. We never see or store your full card number. From Stripe we receive only what we need to grant and manage the subscription (for example your billing email and subscription status). Stripe’s handling of your payment data is governed by Stripe’s own privacy policy.

If you email us or sign up for updates

If you send feedback, ask about the Dealer tier, or join a mailing list, we keep the email address and message you provide so we can reply and, if you opted in, send occasional updates. You can unsubscribe or ask us to delete it at any time.

Analytics

We use privacy-respecting, aggregate analytics to understand which features are used and to fix problems. This tells us things like “the scan page was opened”, not who you are. We do not build advertising profiles and we do not sell analytics data. You can opt out with your browser’s Do-Not-Track / tracking-protection settings or a content blocker; the app keeps working either way.

Third parties we rely on

To run Foilio we use: Vercel (hosting), Supabase (accounts and sync), Stripe (payments), an analytics provider, and free card-catalog sources for prices and images (Scryfall, pokemontcg.io, YGOPRODeck, Lorcast, the PSA public API and Cardmarket-reference data). Buy links may point to eBay or Amazon under our affiliate disclosure. Each processes data under its own privacy terms.

Your rights

Wherever you live, you can ask us to access or delete the data tied to your account, and object to a given use. If you are in the EU/EEA or UK, you have rights under the GDPR; in California, under the CCPA. The fastest self-serve deletion is to sign out and clear your browser data (for on-device data) and to contact us to remove any synced account. We do not sell personal information.

Children

Foilio is a general-audience hobby tool and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will remove it.

Changes

If this policy changes materially, we will update the date above and, for significant changes, note it in the app. Continued use after an update means you accept the revised policy.

Contact

Questions or requests: use the feedback link in the app, or email privacy@foilio.net. We aim to respond within a few days.

See also our Terms of Service and affiliate disclosure.