Home

Privacy Policy

Last updated: September 1, 2026

1. What we collect

  • Account and plan details: your email address, password (stored as a hash by our auth provider), optional public handle, account ID, subscription tier, and purchase status. Payment and subscription data is handled by our payment processor, Stripe; card details stay with Stripe and are not available to PackLens.
  • Your content: the videos you upload (including their audio), the rendered results, card lists and totals, and any corrections you make during review.
  • Technical and diagnostic data: request logs, IP addresses, app and OS versions, a random install identifier, and crash, hang, launch, performance, and WebView error reports. We use these to keep the app reliable, secure the service, enforce rate limits, and prevent abuse.

We don't run third-party advertising or analytics trackers.

2. How we use it

  • To provide the service: processing your videos and showing you results.
  • To enforce plan limits and keep the queue fair.
  • To improve recognition accuracy: for every scan we keep a copy of its analysis record, and we may also keep the small cropped card images it produced. We may use them, together with any corrections you make in review, to train and evaluate our recognition models. This copy is kept apart from your scan library, so it is not removed by your plan's storage limit. It is deleted when you delete the scan, and when you delete your account. We do not keep your original video for this.
  • To respond when you contact us.

We do not sell your data.

3. Where it lives

PackLens runs on a small set of infrastructure providers acting as processors: Vercel (web hosting), Supabase (authentication and database), Cloudflare R2 (video storage), and RunPod (video processing while your scan runs). Card recognition runs on that processing infrastructure against a local copy of the Scryfall card catalog; if that local copy is unavailable, card-name text read from your footage (never the images, and never your account identity) is looked up against Scryfall's public card API instead. No data from your footage is sent to any AI model provider. Crash and error reports are summarized into one-line operational alerts and posted to our ops team's Discord; these summaries cover app version and crash or error detail, not account identity. Payments and subscriptions are handled by Stripe. If you opt a scan into Bloodline, the following is shared with Vibecade, which operates the Bloodline game, to publish the playable pack: the cards detected in that pack (names and identifiers), when the pack was opened, your game settings for it (play window, tries per card, and patron gating), and a play identifier; never your footage, and never your account identity. PackLens shares data with these providers as needed to operate the service.

When card artwork is displayed, your browser may load it directly from Scryfall, Pokémon TCG API image hosting, or Scrydex. Those services receive the information ordinarily included in a web request, such as your IP address, browser details, the requested image, request time, and possibly the PackLens site origin. PackLens does not send them your PackLens account identity.

4. Sharing and public pages

Results are private to your account unless you create a share link. Share links are unlisted: anyone with the URL can view that result (including your handle, if you set one), and they are excluded from search-engine indexing. You can stop sharing a result at any time from its page. Only results you have shared can appear in the highlights on our home page.

We also show anonymous platform-wide totals (for example, the number of scans completed and their combined value). These totals count every scan, including ones you have not shared, but they contain no cards, no results and nothing that identifies you or your account.

5. Retention and deletion

A recording made or selected in the iOS app is staged in the app's private storage until you upload or remove it, and stale staged recordings are cleared after about 24 hours. Free-tier uploaded videos are stored temporarily and may be removed after processing; Pro storage is kept per your plan. Result data stays with your account. You can delete individual scans from the app, and you can permanently delete your whole account, including stored footage, from the Delete account section of Settings, or by emailing support@vibecade.ai from your account address. Requesting deletion stops your sharing immediately: every share link you have is switched off and your results leave the home-page highlights at that moment, not when the deletion finishes. A link preview that another app or service already fetched can stay in its cache for up to an hour after that; we cannot recall a preview someone has already received. Canceling the request does not switch them back on; you decide which results to share again. Account deletion itself completes within 30 days of the request. Footage already incorporated into model training in anonymized, aggregate form cannot be extracted retroactively. A pack you published to Bloodline stays playable there until its play window expires (up to 90 days), even if you delete the scan that created it; deleting the scan removes the play link from your account.

6. Children

PackLens is not directed to children. You must be at least 13 years old to hold an account (see the Terms of Service), and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us their information, email support@vibecade.ai and we will delete the account and its content.

7. Changes and contact

We'll update this policy as the service evolves; the date above reflects the latest revision. For any privacy question, contact support@vibecade.ai. See also the Terms of Service.