PRIVACY
Privacy Policy
Last updated: 10 November 2026
Cardrecipe is made by The Hotchpotch Dev. This page explains, in plain words, what the app does with
your information. The short version: your collection stays on your phone, your photos never leave it,
and there are no ads or trackers.
Contact: hello@thehotchpotch.dev
What stays on your phone
These never leave your device unless you deliberately share them:
- the cards in your collection, and how many copies of each you own
- your binders, pages and pocket layouts
- your recipes, colour palettes and settings
They are stored in a database inside the app. Deleting the app deletes them. There is no backup on our
side, because we never receive them.
The camera
The camera is used to read a card. The picture is processed on your phone — the app reads the card's
name and its collector number, and throws the picture away. Photos are never uploaded.
The app asks for camera permission the first time you use the scanner. You can refuse and still search
the catalogue by typing.
Saving a page to your photos uses your photo library, and only happens when you press save.
If you use the community
The community is optional. Planning, collecting and arranging all work without an account. To post a
page, like, or comment, you create an account, and then we store:
- What — Why
- your email address — to sign in, and to confirm it is really you
- your username — shown next to the pages you post
- a password hash — to check your password — we never see the password itself
- the pages you publish, and their captions and tags — that is the point of posting
- your likes, comments and reports — so the feed works and so moderation can work
We do not sell it, and we do not use it for advertising. There is no analytics or advertising software
in the app at all.
Where it is stored: on a server we run ourselves (a single virtual machine), not with an advertising
or analytics company.
Deleting your data
You can delete your account from inside the app: ME → Delete my account. That removes your account,
your published pages, your comments and your likes.
If you would rather ask us, email hello@thehotchpotch.dev from the address you signed up with, and we
will delete it within 30 days.
Deleting the app removes everything that was only on your phone.
Children
Cardrecipe is not aimed at children under 13, and accounts are for people 13 and over. If you believe a
child has created an account, email us and we will remove it.
Your rights
You can ask us what we hold about you, ask for a copy, or ask us to delete it. Email
hello@thehotchpotch.dev. If you are in the EU or UK, this covers your GDPR rights; if you are in
California, your CCPA rights. We do not discriminate against anyone for asking.
What we do not do
- no advertising, no ad networks, no tracking pixels
- no selling or renting your information
- no third-party analytics
- no reading your photo library
- no location tracking
- no contacts, no microphone, no health data
Changes
If this policy changes in a way that matters, the app will say so before you next post, and the date at
the top of this page will change.
Security
Passwords are stored as hashes. Traffic between the app and the community server is encrypted. No system
is perfect, so please use a password you do not use anywhere else.
*Cardrecipe · The Hotchpotch Dev · hello@thehotchpotch.dev*