Privacy Policy

Overview

Grimoire does not require an account. NeonTanuki Ltd runs no user database and has no access to your collection, decks, or wishlist. Your data stays on your devices and in your own iCloud account.

What we collect

No personal data. NeonTanuki Ltd collects no name, no email address, no account, and no information about which cards you own. Grimoire does record anonymous usage statistics, described under Usage analytics below.

Your Grimoire data

Your collection, decks, wishlist, and settings are stored on your device. If iCloud Drive is enabled, they sync through your own iCloud account using Apple's CloudKit private database. That data sits in your Apple Account and is subject to Apple's Privacy Policy. NeonTanuki Ltd cannot read it, export it, or recover it.

Deleting your data

Delete individual items in the app at any time. To remove everything, delete Grimoire and then remove its iCloud data in Settings → your name → iCloud → Manage Account Storage → Grimoire.

Card scanning

Grimoire reads a card's set code and collector number using on-device text recognition. Camera frames are processed locally, in memory, while the scanner is open. Grimoire does not record video, does not save photographs, and does not transmit any image to NeonTanuki Ltd or to anyone else.

Card data and network connections

The Magic: The Gathering card catalogue ships inside the app. Grimoire works fully offline from first launch.

Grimoire connects to the network only in these cases:

• Catalogue and price updates. Downloaded from catalog.neontanuki.com, hosted on Cloudflare R2 object storage, and verified by checksum. Cloudflare receives the IP address of any device that makes a request. See Cloudflare's Privacy Policy.
• Card images and rulings. Requested from Scryfall when a card is displayed. Scryfall receives the IP address of the requesting device. See Scryfall's Privacy Policy.
• Usage analytics. Sent to TelemetryDeck, as described in the next section.

These requests carry no account and no information about what you own. No service is told which cards belong to your collection.

Usage analytics

Grimoire records anonymous usage statistics so we can see which features people use and where the app goes wrong. Typical examples are a deck being created, a scan finishing, an import failing, or a catalogue update being applied.

These statistics never include your name, your email address, an account, or any card you own. Where a size would be useful, we record a broad range rather than a figure — for example "100–999 cards" — so that nothing in the data is precise enough to point at one person.

So that we can count people rather than events, each signal carries a one-way hash of a device identifier. The identifier itself never leaves your device, and the hash cannot be turned back into it. It is not Apple's Advertising Identifier, and it is never combined with data from another company's app or website.

Processing is carried out by TelemetryDeck GmbH, a privacy-focused analytics company based in Germany with hosting in the EU. See TelemetryDeck's Privacy Policy. As with any network request, TelemetryDeck receives the IP address of the sending device.

Grimoire has no setting to switch this off. With no accounts and no servers of our own, it is the only way we can tell which parts of the app need work, and it holds nothing that identifies you.

Crash reports

If you have turned on Share with App Developers in your device privacy settings, Apple sends us crash and performance reports for Grimoire. That data is collected and aggregated by Apple, is not linked to you, and reaches us only in that form. See Apple's Privacy Policy.

Third-party SDKs

Grimoire uses one third-party analytics SDK, TelemetryDeck, for the statistics described above. Grimoire contains no advertising, attribution, or cross-app tracking SDKs, does not use the Advertising Identifier, and does not track you across other apps or websites. Grimoire does not ask for App Tracking Transparency permission, because it does not track.

In-app purchases

Grimoire Extra is sold through the App Store. Apple handles the entire transaction. NeonTanuki Ltd receives no payment details, no card numbers, and no billing address. Purchase status is verified against Apple's servers to unlock features and to restore purchases.

Support

If you email us, we receive your email address and whatever you choose to tell us. We use it to answer you, and for nothing else. We do not add you to a mailing list.

Children's privacy

Grimoire is rated 13+. It collects no personal data from anyone, including children. The anonymous usage statistics described above contain nothing that identifies a person of any age.

Your rights

NeonTanuki Ltd holds no data that identifies you. Nothing we hold points back to you, so there is no record of yours for us to find, disclose, correct, or erase on request. Data held in your iCloud account is under your control and Apple's, and can be exported or deleted through Apple at any time. Apple's Privacy Policy explains how.

Changes to this policy

If this policy changes materially, we will update this page and revise the date above.

Contact

privacy@neontanuki.com

NeonTanuki Ltd. Registered in England and Wales. Company number: 17138911.