Privacy policy
This is a translation. The binding version is the German one; in case of doubt, the German text prevails.
Controller
Stefan Hölting
c/o Autorenglück #42102
Albert-Einstein-Straße 47
02977 Hoyerswerda
Germany
E-mail: support-mytcgcollection@your-app-world.de
The short version
My TCG Collection runs entirely on your device. There are no user accounts, no registration, no server operated by the provider, no advertising, no tracking and no third-party analytics. Your collection, your wishlist and your decks stay in a database on your device.
The provider never has access to this data.
No sync — but a backup in your own iCloud
The app does not sync between devices. Two devices used in parallel do not reconcile with each other; to move your collection you export it as an Excel or backup file and read it in on the other device.
With Pro the app will, if you want it to, place a backup in your own iCloud, in the “My TCG Collection” folder in iCloud Drive. That is a copy of your database, not synchronisation: one file per device, nothing is merged. The file sits in your iCloud storage and not with the provider — the provider has no access to it and does not learn whether you use the feature at all. The legal basis is Art. 6 (1) (b) GDPR, as the backup is part of the function you asked for; storage by Apple is governed by your own iCloud agreement with Apple. You can switch the automatic backup off in the app's settings at any time and delete the file in the Files app.
Independently of that, the data sits in the app's "Application Support" folder and is therefore included in the regular device backup that your iPhone may store in iCloud. You control that backup in the iOS system settings; the provider has no access to that either.
Processing on the device
Stored locally only:
- the card numbers of your collection, with edition and a comment per copy
- your wishlist
- your decks and the cards in them
- the card reference data (names, statistics, card texts, image addresses)
- app settings such as the chosen language
This data leaves your device only if you start an export yourself and pass the file on.
Connections to card databases
The app already ships with the card database and works without a connection. In two cases it does connect – each time only when you use that function:
- Update the card database (settings): a request to the public interface of YGOPRODeck.
- Look up an unknown card number (during import or when adding manually): a request to the public interface of Yugipedia.
The app does not load card images. The link "View card on Yugipedia" in the card view opens the page in your browser; Yugipedia's privacy policy applies to that visit, and the app itself transmits nothing in the process.
What is transmitted is only the technically necessary request, that is a card number or a card name. No personal data is transmitted – in particular no user account, no device identifier and not the contents of your collection. As with any request to an internet address, the respective operator necessarily receives your IP address.
The legal basis is Art. 6 (1) (b) GDPR, as the request is part of the function you asked for. The privacy notices of the respective providers apply.
App Store and in-app purchases
Purchase, payment, renewal and cancellation of the in-app purchases – the Pro unlock as a monthly or yearly subscription or as a one-time purchase, and the voluntary tip jar – are handled exclusively by Apple. The provider receives from Apple only aggregated, non-personal sales and payout reports. Payment data is neither collected nor stored by the provider.
Whether Pro is active – and, for a subscription, whether it is still running – is checked by the app through Apple's StoreKit, and the result is remembered locally. No user account or identifier is transmitted to the provider in the process. Legal basis: Art. 6 (1) (b) GDPR.
The provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Privacy policy: apple.com/legal/privacy
Diagnostic data
The app integrates no crash or analytics services of its own. If your device sends diagnostic data to Apple, that rests on your consent in the iOS system settings ("Analytics & Improvements"). At most, the provider receives anonymised crash reports through App Store Connect.
Contact and support
If you send us a support e-mail, we process your details – sender address, subject, message text and any attachments – solely to handle the enquiry and in case of follow-up questions. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in answering your enquiry. If the enquiry concerns a purchase or its preparation, Art. 6 (1) (b) GDPR applies in addition.
We do not run the support mailbox ourselves: it is hosted by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your message sits in our mailbox there and is read and answered by us personally only.
No AI service is involved. The contents of your message are neither evaluated automatically nor used to train AI models; there is no automated decision in individual cases within the meaning of Art. 22 GDPR.
Google acts as our processor under Art. 28 GDPR; a corresponding data processing agreement is in place.
What you write to us is up to you. To handle a support enquiry we need neither your complete collection nor details of its value – please redact such details in screenshots. For sensitive matters you may also write to us from a neutral address without using your real name.
Messages are deleted as soon as they are no longer needed, at the latest once statutory retention periods have expired.
Recipients and third countries
We do not pass on the data you record in the app – we have no access to it. The card data requests described above may reach servers outside the EU; all that is transmitted is the request itself along with the technically necessary IP address. Beyond the cases described above there are no recipients of personal data:
- Apple – for purchase and billing
- Google – operation of the support mailbox
With both, processing may also take place in the USA. The transfers are safeguarded by the European Commission's standard contractual clauses; Apple and Google are additionally certified under the EU-US Data Privacy Framework.
Storage period and deletion
Your data stays stored until you delete it. You delete individual entries directly in the app. All local data is removed when you delete the app from your device.
Your rights
You have the rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). From the app itself we hold no data about you; to that extent we can only confirm that there is nothing to disclose. If you have written to us, these rights concern the correspondence in the support mailbox.
You also have the right to lodge a complaint about the processing with a data protection supervisory authority (Art. 77 GDPR) – in particular with the authority of your habitual residence, your place of work or the place of the alleged infringement.
Changes
We adapt this policy when changes to the app require it. The current version is available in the app under "Settings → Privacy policy" and at your-app-world.de/mytcgcollection/privacy.html
Hosting of this page
This text is additionally served as a web page through GitHub Pages (GitHub, Inc., USA). In doing so GitHub processes technically necessary connection data such as the IP address; we do not receive the server logs ourselves. The legal basis is Art. 6 (1) (f) GDPR. Details are set out in the privacy policy of the website: your-app-world.de
This English text is provided for convenience; the German version is authoritative.