Toploader OS phone app – Privacy Policy
Version: 2026-10-12
The Toploader OS phone app ("the app") is the phone side of Toploader OS, a desktop app for trading card sellers and collectors. This policy explains what the app does with information. In short: the app has no accounts, no analytics and no advertising. The only thing it sends us is a crash report if it crashes, which you can turn off.
What stays on your phone
The app keeps the following on your phone, in its own private storage:
- Your settings (currency, prices, buying rates, fees, scanner preferences).
- Cards you scan into a batch, buylist offer or sale, including any seller or customer name and notes you type.
- Your completed deals and sales history.
- A copy of your stock (including the photos you've added to your products), collector binders, decks, wishlist and binder covers, if you pair the app with Toploader OS on your computer.
- Cards you add, binders, inventories and decks you make or change, and covers you choose on the phone, until your computer has them (or for good, if you never pair).
- Decklists you paste in to make a deck.
- Your watchlist and a daily record of Cardmarket prices for the cards you track.
- Downloaded card data, card pictures, set symbols, price guides and the card recognition index.
- The pairing details for your computer, including its private access code.
Uninstalling the app deletes all of this.
Backups. Settings → Backup saves the collection changes, binders, decks, wishlist changes and covers that are only on your phone to a file, which you send wherever you choose (for example your own Google Drive or email) using your phone's share menu. It doesn't go to us. Restoring reads a backup file you pick.
The camera
The camera is used to recognise cards and to scan the pairing QR code shown by Toploader OS. Photos are processed on your phone and deleted straight away; they are not saved to your photo library. The app never records video or sound.
If you pair the app with your computer and turn on desktop recognition (Settings), a cropped picture of a card the phone isn't sure about may be sent to Toploader OS on your computer for a second look. It is used only to recognise the card and isn't saved.
Your computer (optional)
If you pair the app with Toploader OS, the two talk directly over your own Wi-Fi network, protected by the private access code in the pairing QR code. Nothing passes through the internet or through us. The app can:
- read your computer's name, app version, region, inventory and binder names, buylist rates and which Toploader OS plan it has;
- read a copy of your stock (including the photos you've added to your products in Toploader OS, as smaller copies), collector binders (with how each cover is framed and which set a binder is the master binder for), decks and wishlist;
- send what you add or change on the phone (cards added to binders and inventories; binders, inventories and decks you make, rename or delete; deck cards; binder covers; wishlist changes) so Toploader OS can apply it, straight away or, if you choose, in its Phone Inbox for you to check first;
- send buylist deals and sales (cards, conditions, quantities, prices, and any names or notes you typed) to the Phone Inbox in Toploader OS, where nothing changes until you review it;
- control your stream overlays (Live), if you use them.
"Unpair All Phones" in Toploader OS disconnects every phone.
Services the app contacts
To work, the app downloads public information from these services. Like any internet request, they can see your phone's IP address and the app's name. The app does not send them your personal information.
| Service | What for |
|---|---|
| Scryfall (api.scryfall.com, cards.scryfall.io, svgs.scryfall.io) | Card details, card pictures, set symbols, card search, and matching pasted decklists to cards |
| Cardmarket (downloads.s3.cardmarket.com) | The daily Magic price guide |
| GitHub (github.com) | The card recognition index and offline card catalogue published by Toploader OS |
| MTGJSON (mtgjson.com) | Preconstructed deck lists |
| ExchangeRate-API (open.er-api.com) | Currency exchange rates |
When you search for cards, your search words are sent to Scryfall; when you paste a decklist, card names the app can't find in its offline catalogue are sent to Scryfall to look them up. Their own privacy policies apply to those requests.
Crash reports
If the app crashes or hits an unexpected error, it sends a crash report to Sentry (sentry.io, stored in the EU), the service we use to find and fix problems. A report contains the error and where in the app's code it happened, the app version, your phone's model and Android or iOS version, and the screens you'd just used. It doesn't contain your name, email, accounts, card lists, prices, photos or anything you typed, and it carries no device or install identifier and no location: the app doesn't send your phone's IP address, and identifiers or location are removed from reports when they arrive. Reports are kept for up to 90 days.
You can turn crash reports off in Settings → About ("Send crash reports").
Notifications
If you allow notifications, the app checks prices once a day in the background (your phone chooses when, usually on Wi-Fi) and tells you about watchlist alerts, and optionally a daily stock summary and stock worth more than you're asking. The notifications are created on your phone from information already on it; no notification service or server is involved, and nothing about them is sent anywhere.
Sharing
The app shares quotes, receipts and lists only when you tap Share, and only with the app you choose.
Children
The app is not directed at children under 13 and doesn't knowingly collect information from them.
Changes
If this policy changes, the new version will be published at the same address with a new date.
Contact
Questions about this policy, or to ask for a crash report to be deleted: help@toploaderos.com