Log TCG Privacy Policy
Effective 2 September 2026. This replaces the Log Pose privacy policy of 3 April 2025.
Log TCG is the name for the trading card collection apps published by Jared Kirk. It currently covers two apps:
- Log Pose — for the One Piece Card Game
- Log Punk — for the Cyberpunk TCG
This policy applies to both. Where an app differs, it says so. "We" and "us" mean Log TCG; "the app" means whichever of the apps you are using.
What changed. The previous policy said Log Pose did not collect any user data. That was true when it was written, and stopped being true when accounts, cloud sync and usage analytics were added. This policy describes what the apps actually do today.
The short version
- You can use the app without an account. If you never sign in, your collection stays on your device and we hold nothing about you except anonymous usage statistics.
- If you do sign in, we store your email address, your profile, and your collection, so that it survives a lost phone and can be shared with friends.
- Card scanning happens entirely on your device. No photograph or camera frame is ever sent to us or to anyone else.
- We do not show ads, do not use advertising identifiers, do not track you across other apps or websites, and do not sell or rent your data to anybody.
What we collect
If you use the app without an account
Usage analytics. The apps record which features are used — that a search happened, that a deck was created, that a screen was opened — through Google Firebase Analytics. These records are tied to a random identifier that Firebase assigns to your installation. They are not linked to your name, your email or your account, and the identifier is reset if you delete and reinstall the app. We use this only to understand which parts of the app are worth improving.
Nothing else. Your collection, folders, decks and settings are stored on your device and are not sent anywhere.
If you create an account
Your email address. You sign in with Apple or with Google, and that provider tells us your email address. We use it to identify your account and, rarely, to contact you about the service. If you use Sign in with Apple and choose Hide My Email, we receive Apple's relay address and never see your real one — this is supported and works normally.
Your profile. The username you choose, your display name, your avatar and its background color, the date you joined, and whether your profile is public.
Your collection. The cards you own and how many, your folders, decks, binders and their arrangement, and which cards you have marked in any way. This is stored so that it is available on your other devices and so it can be shown to friends you have added.
Your purchases. If you subscribe, we store the subscription's product identifier, which app it was bought in, the store's transaction identifier, its expiry date, and the store's signed receipt. We use this to know whether your subscription is active, and — because it is stored against your account rather than your device — to unlock paid features in our other apps when you sign in to them. We never see or receive your card number, billing address or any other payment detail — the entire payment is handled by Apple or by Google, depending on where you installed the app.
What we do not collect
Photographs and camera images. Both apps can identify a card through the camera. The matching runs entirely on your device, using the on-device image recognition built into the operating system. No frame, photograph or crop is uploaded, stored or transmitted. The app downloads reference card artwork to your device in order to compare against it; nothing goes the other way.
Advertising and tracking identifiers. The apps contain no advertising SDK and no ad network. They do not read the device advertising identifier — Apple's IDFA or Google's Advertising ID — and do not ask for App Tracking Transparency permission. As of 2 September 2026 the underlying advertising and identifier frameworks have been removed from the iOS apps entirely, so there the capability is not merely unused but absent. We do not engage in "tracking" as Apple defines it, and we do not build advertising profiles by any other name either.
Location, contacts, health, messages, files and browsing history. None of these are requested, read or stored.
Who else is involved
We keep the number of third parties deliberately small. Nobody in this list is paid for your data, and nobody receives it for their own advertising purposes.
| Who | What they handle | Why |
|---|---|---|
| Google Firebase | Sign-in, your stored collection, images, usage analytics | Hosts the account and sync features |
| Apple | Subscription purchases, Sign in with Apple | Runs the App Store payment and identity systems, for apps installed from the App Store |
| Google Play | Subscription purchases | Runs the billing system for apps installed from Google Play |
Firebase stores data on Google Cloud servers, which are located in the United States. If you use the apps from outside the United States, your data is transferred and stored there.
Links out to marketplaces
Card detail screens link to TCGplayer, Cardmarket and eBay so you can look up what a card sells for. Opening one of these opens that company's own website in an in-app browser. We do not send them anything about you, but once you are on their site you are subject to their privacy policy and not this one.
Affiliate disclosure: our TCGplayer links are affiliate links, in the apps and on the card pages at logtcg.app. If you buy something after following one, we may receive a commission. This costs you nothing and never changes what you are shown. Cardmarket and eBay links on the card pages are not affiliate links.
Things other people can see
Some features exist to be social, and it is worth being plain about what they expose.
- Usernames are searchable. Someone who knows or guesses your username can find your account in order to add you.
- A public profile can be viewed by other users of the app, including your collection, your folders and your decks.
- Friends you accept can view your collection and folders.
You control this. Your profile's public setting is in the app under Settings, and turning it off stops your profile being viewable. Anything you have already chosen to share with a specific friend remains visible to that friend until you remove them.
Please treat anything on a public profile as public. If you would not want a collection's contents or value known, keep your profile private.
How long we keep it, and how to delete it
We keep your account data for as long as your account exists.
You can delete your account from inside the app, under Settings. Doing so removes your profile, your username, your synced collection, your folders and decks, and your friend connections from our systems. Anonymous usage analytics, which are not linked to you, are not affected because they cannot be traced back to your account.
Deleting the app without deleting your account leaves your account intact, so that reinstalling restores your collection. If you want the data gone, delete the account first.
Deleting your account does not cancel a subscription. Cancel that separately with whichever store you bought it from, or it will keep renewing:
- Apple — device Settings → your Apple Account → Subscriptions
- Google Play — the Play Store app → Payments and subscriptions → Subscriptions
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to receive a copy of it, and to object to or restrict how we use it. If you are in California, you also have the right not to receive different service for exercising those rights — and note that we do not sell or share personal information as those terms are defined by the CCPA.
Most of this you can do yourself in the app. For anything else, email [email protected] and we will respond. You may also complain to your local data protection authority.
Children
The apps have no minimum age, because used without an account they collect no personal information at all — a collection tracked on one device is stored on that device.
Accounts are for users aged 13 and over, or older where local law sets a higher minimum for consenting to online services (16 in some European countries). We do not knowingly collect personal data from children under that age. If you believe a child has created an account, email us and we will delete it.
A younger child can use the app fully on a single device. They simply cannot sign in, which means no email address, no profile and no synced collection ever reaches us.
Security
We use the access controls and authentication provided by Google Firebase, and payment data never reaches us at all. No service can promise perfect security, and we do not. What we can say is that we hold as little as the features allow, and that the most sensitive category — payment details — we never receive.
Changes to this policy
We may update this policy. When we do, the new version is posted on this page with a new effective date at the top. If a change materially affects what we collect or who we share it with, we will make that clear rather than quietly editing the text.
Contact
Log Pose is an independent application, unaffiliated with Bandai, the One Piece TCG or Eiichiro Oda. Log Punk is an independent application, unaffiliated with CD PROJEKT RED, CD PROJEKT S.A. or the Cyberpunk TCG. All card names, images and game content are the property of their respective owners.