Back to Home

Privacy Policy

Last updated: September 23, 2026

1. Data Controller

The data controller responsible for processing your personal data is Pavel Taiko, IČ: 69371776. You can contact us at hello@foilio.cards.

2. Data We Collect

We collect the following categories of personal data:

  • Account data: information used by a supported sign in method, such as your email address. Authentication is handled by Firebase Authentication.
  • Collection data: the Magic: The Gathering cards you add to your collection, including Foil and Non-foil status and quantities.
  • Usage data: anonymous analytics data such as feature usage and crash reports, collected via Firebase Analytics and Crashlytics.
  • Device data: device type, operating system version, and app version for technical support purposes.

We do not collect payment information. Purchases made through the app are handled by the Apple App Store or Google Play.

3. Purpose and Legal Basis

We process your personal data for the following purposes:

  • Providing the service: to maintain your account and sync your collection across devices (legal basis: performance of a contract).
  • Improving the app: to analyze usage patterns and fix bugs (legal basis: legitimate interests).
  • Communication: to respond to support requests (legal basis: legitimate interests).
  • Sharing links: to publish a page for a card or binder when you choose to create a link for it (legal basis: your consent, see section 5).

4. Data Processors

We use the following external services to operate Foilio:

  • Google Firebase (Authentication, Firestore, Analytics, Crashlytics): data may be processed in the USA under Google's Standard Contractual Clauses.
  • Google Analytics: measures visits to this website, with analytics cookies only after you accept them (see Section 8). Data may be processed in the USA under Google's Standard Contractual Clauses.
  • Scryfall, Cardmarket and TCGplayer: we use card information and public pricing data. We do not send your personal data to these services for pricing.
  • Apple and Google: for purchases made through the app.

5. Sharing Links

Foilio lets you create a link to a single card or to one of your binders. Creating a link publishes a page on this website that anyone holding the link can open in a browser, without an account and without signing in. This happens only when you choose to create a link. Nothing in your collection is published otherwise.

A shared page contains:

  • For a card: its name, set, collector number, rarity and artwork, its current market prices, and whether you own it in non-foil and in foil.
  • For a binder: the binder's name, how many cards it holds, and the same details for each card in it.

A shared page never contains:

  • Your account name, email address or profile picture. A binder name may identify you if you include personal information in it.
  • What you paid for a card, or when you acquired it.
  • The total value of your collection.

The link address contains a long random token that is difficult to guess. Shared pages are excluded from search engine indexing. The page reads your data when it opens, so it reflects your collection at that time.

You can revoke any link in Settings, under Sharing. After revocation, the shared page is no longer available through that link. A messaging service or social network may keep a cached preview. Anyone who opened the page earlier may also have saved what they saw.

6. Data Retention

We retain your account data while your account is active. You can delete your account in the app. Contact us if you want to request deletion of other personal data associated with your account. Analytics data may be retained for up to 26 months.

7. Your Rights

Under the GDPR, you have the following rights:

  • Right of access: to request a copy of your personal data.
  • Right to rectification: to correct inaccurate data.
  • Right to erasure: to request deletion of your data.
  • Right to data portability: to receive your data in a structured format.
  • Right to object: to object to processing based on legitimate interests.
  • Right to lodge a complaint: with your local data protection authority.

To exercise any of these rights, contact us at hello@foilio.cards.

8. Cookies

The Foilio mobile app does not use browser cookies. This website uses Google Analytics. Analytics cookies are disabled until you accept them. Before consent or after a refusal, Google may receive measurement signals without analytics cookies. Your choice is stored in local browser storage. Advertising storage remains disabled.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted data transmission with TLS, secure password hashing through Firebase Authentication and restricted access to production data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email.

11. Contact

If you have any questions about this Privacy Policy, please contact us at hello@foilio.cards.