Privacy Policy

for the app “TAP – Track & Play”
Last updated: October 2, 2026

This is a translation provided for convenience. In case of any discrepancy, the German version shall prevail.

1. Controller

The person responsible for processing personal data in connection with the app “TAP – Track & Play” is:

Michaela Schick
Email: trackandplay@mailbox.org

2. General Information

Protecting your data is important to us. “TAP – Track & Play” has been designed so that the game and management data you record in the app is generally processed and stored locally on your device.

No user account is required to use the app. In particular, the app does not ask for email addresses, postal addresses or any other contact details.

3. What Data Is Processed?

You can create data yourself within the app. This may include in particular:

This data is entered by you or generated through your use of the app. The app does not require registration and does not collect any mandatory identity or contact data.

Please note that a player name you choose may, under certain circumstances, constitute personal data if it allows conclusions to be drawn about a specific person.

4. Local Storage

The game, deck, statistics and settings data you create in the app is stored locally on your device. This data is not automatically transferred to any server operated by the controller.

For local storage, the app uses, among other things, a local database and local settings.

5. Export, Import and QR Code Exchange

The app offers functions for exporting and importing data. These functions are intended in particular for personal backups and manual data exchange.

In addition, information you select, for example about players, decks or games, can be transferred in QR codes for exchange between users.

These transfers are actively triggered by you. The app does not automatically transmit the data concerned to a central server. When you pass on an export or a QR code, you decide for yourself to whom you make the information it contains available.

Please therefore be careful about whom you share exported files or QR codes with, as they may contain the game, player or deck information you have selected.

6. Camera

To read sharing or exchange QR codes, the app may access your device’s camera.

The camera is used exclusively for scanning QR codes. The app does not store photos or videos taken with the camera, nor does it transfer them to its own servers.

7. Retrieving Card Data via Scryfall

At the user’s request, certain functions of the app can retrieve card data for Magic: The Gathering, in particular content related to Archenemy and Planechase, via the Scryfall API.

This retrieval only takes place when the corresponding function is used. The app uses the retrieved card data and card images for the respective function and may cache this content locally on the device so that it is subsequently available without being retrieved again.

Communication with Scryfall takes place over the internet. The specific data processing by Scryfall is additionally governed by Scryfall’s privacy information. Further information is available on Scryfall’s website: Scryfall – Privacy Policy.

8. No Analytics, Advertising or Tracking Services

As things currently stand, the app does not use its own servers or any services such as Google Analytics, Firebase, Crashlytics or advertising networks. Consequently, the app does not use such services to analyze user behavior, serve personalized advertising or create user profiles.

9. Recipients of Personal Data

The game and management data you create locally is generally not automatically transferred to third parties.

A transfer may take place in particular if you yourself initiate a data exchange via the functions provided or use the optional Scryfall function.

10. Legal Basis

Insofar as personal data is processed, the processing takes place in the context of using the app, in particular to provide the functions you request. Insofar as processing is based on your voluntary decision, such as when optionally retrieving card data or actively exchanging data, your use of the respective function is decisive for this.

11. Storage Period and Deletion

The locally stored data generally remains on your device until you delete it within the app, remove the app or its data from the device, or otherwise overwrite or remove it.

For exported files: you decide for yourself where you store these files and when you delete them.

12. Your Rights

Insofar as the General Data Protection Regulation (GDPR) applies to the respective processing, you have in particular the right of access to your personal data and – subject to the statutory requirements – the right to rectification, erasure, restriction of processing and to object to certain processing. Insofar as processing is based on consent, you may withdraw it with effect for the future.

Since the app generally stores the data you create locally on your own device and no central user database is operated, this data is usually only available on your device or in export files you have created yourself.

13. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data if you believe that the processing violates data protection regulations.

14. Changes to This Privacy Policy

This privacy policy may be amended if the functions of the app, the services used or the legal requirements change. The current version is always published at this address.