PRIVACY

Privacy Policy

Last updated: 10 November 2026

Cardrecipe is made by The Hotchpotch Dev. This page explains, in plain words, what the app does with

your information. The short version: your collection stays on your phone, your photos never leave it,

and there are no ads or trackers.

Contact: hello@thehotchpotch.dev

What stays on your phone

These never leave your device unless you deliberately share them:

• the cards in your collection, and how many copies of each you own
• your binders, pages and pocket layouts
• your recipes, colour palettes and settings

They are stored in a database inside the app. Deleting the app deletes them. There is no backup on our

side, because we never receive them.

The camera

The camera is used to read a card. The picture is processed on your phone — the app reads the card's

name and its collector number, and throws the picture away. Photos are never uploaded.

The app asks for camera permission the first time you use the scanner. You can refuse and still search

the catalogue by typing.

Saving a page to your photos uses your photo library, and only happens when you press save.

If you use the community

The community is optional. Planning, collecting and arranging all work without an account. To post a

page, like, or comment, you create an account, and then we store:

• What — Why
• your email address — to sign in, and to confirm it is really you
• your username — shown next to the pages you post
• a password hash — to check your password — we never see the password itself
• the pages you publish, and their captions and tags — that is the point of posting
• your likes, comments and reports — so the feed works and so moderation can work

We do not sell it, and we do not use it for advertising. There is no analytics or advertising software

in the app at all.

Where it is stored: on a server we run ourselves (a single virtual machine), not with an advertising

or analytics company.

Deleting your data

You can delete your account from inside the app: ME → Delete my account. That removes your account,

your published pages, your comments and your likes.

If you would rather ask us, email hello@thehotchpotch.dev from the address you signed up with, and we

will delete it within 30 days.

Deleting the app removes everything that was only on your phone.

Children

Cardrecipe is not aimed at children under 13, and accounts are for people 13 and over. If you believe a

child has created an account, email us and we will remove it.

Your rights

You can ask us what we hold about you, ask for a copy, or ask us to delete it. Email

hello@thehotchpotch.dev. If you are in the EU or UK, this covers your GDPR rights; if you are in

California, your CCPA rights. We do not discriminate against anyone for asking.

What we do not do

• no advertising, no ad networks, no tracking pixels
• no selling or renting your information
• no third-party analytics
• no reading your photo library
• no location tracking
• no contacts, no microphone, no health data

Changes

If this policy changes in a way that matters, the app will say so before you next post, and the date at

the top of this page will change.

Security

Passwords are stored as hashes. Traffic between the app and the community server is encrypted. No system

is perfect, so please use a password you do not use anywhere else.

*Cardrecipe · The Hotchpotch Dev · hello@thehotchpotch.dev*