Privacy Policy
Effective September 29, 2026
InkTrove is a companion app for Disney Lorcana players and collectors. This policy explains what the InkTrove app and this website collect, how it's used, and the choices you have. In short: we collect only what's needed to run your account and keep your collection in sync, we don't sell your data or use it for advertising, and you can delete your account at any time from inside the app.
Information you give us
- Account details: your email address and password. Passwords are stored securely by our sign-in provider and are never visible to us.
- Display name: the name you choose when you sign up, which you can change in Account Settings.
- Your collection data: the cards you own, the cards you've marked for trade (and how many), the cards you need, and the decks you build.
Camera and card scanning
InkTrove uses your camera only when you open the scanner. To identify a card, the app sends a photo of it through our server to Google's Gemini service, which reads the card and returns its details. We don't keep these photos, and they aren't linked to your profile. Photos the app couldn't read may be kept temporarily on your device so you can review them, and are removed when you dismiss them.
Trading and QR codes
Your trade QR code contains an identifier for your account and a summary of the cards you have for trade and the cards you need. The trade card you share also shows your display name.
When another signed-in InkTrove user scans your code, the app can look up your current for-trade cards (which cards, whether they're foil, and how many) and your needs (which cards and how many) so it can find trades between you. It doesn't reveal your email address or anything else about your account. Only share your code with people you want to trade with.
Shared decks
If you share a deck, anyone with its link can see the deck's name, its card list and your display name. Decks you haven't shared stay private.
Technical information
Like most online services, our providers automatically record basic technical information when you use the app or this website, such as your IP address, device or browser type, and the time of each request. This is used to keep the service running and secure. InkTrove does not use analytics, advertising trackers or tracking cookies.
How we use your information
- To create and secure your account and sign you in.
- To store your collection, trades, needs and decks and keep them in sync across your devices.
- To identify cards you scan.
- To find trades when you scan another player's QR code, or they scan yours.
- To send account emails, such as email confirmation and password resets.
- To respond when you contact us for support.
We don't sell your personal information, and we don't use it for advertising.
Service providers we use
We rely on a small number of providers to run InkTrove. They process data only to provide their service to us:
- Supabase: account sign-in, database hosting and our server functions.
- Google (Gemini API): identifying cards from scan photos.
- Resend: delivering account emails.
- Netlify: hosting this website.
- Lorcast: public card information such as names, images and set details. No personal information is sent to Lorcast.
Links to other sites
InkTrove links to other websites, such as TCGplayer for card prices. Those sites have their own privacy policies, and we're not responsible for how they handle your information.
Keeping and deleting your data
We keep your information for as long as you have an account. You can delete your account at any time in the app under Profile → Account → Delete Account. This permanently deletes your account, display name, collection, trades, needs and decks. You can also email privacy@inktrove.app and we'll delete it for you.
Security
Your data is sent over encrypted connections, and access to it is restricted to your own account, except for the trade information described above. No system is perfectly secure, but we take reasonable steps to protect your information.
Children
InkTrove accounts are for people aged 13 and older, and we don't knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at privacy@inktrove.app and we'll delete it.
Your choices and rights
You can view and edit your display name and collection in the app at any time, and delete your account as described above. Depending on where you live, you may have additional rights, such as requesting a copy of your data. To make a request, email privacy@inktrove.app.
Changes to this policy
If we make meaningful changes, we'll update this page and the effective date above.
Contact
Questions about privacy? Email privacy@inktrove.app.