Privacy policy

Last updated October 14, 2026

In short: you create an account so your collection syncs across your devices. Only you can see your collection. We don't sell your data, show ads, or use tracking or advertising analytics. You can delete your account and everything in it from the app at any time.

Who we are

Very Lucky Collector ("the app") is made and run by VKStudios LLC, an Ohio company ("we", "us"). It's an app for tracking a collection of trading cards and collectibles and estimating what it's worth. Questions about this policy: veryluckysupport@vikingsleystudios.xyz.

What we collect

Account: your email address and a password (the password is handled by Google Firebase Authentication; we never see it).
Your collection: the items, portfolios, packs and boxes, watchlist, prices paid, sale details, notes and values you enter.
Photos you add to custom items.
Feedback you send from the app, with the app version and basic device details (platform, screen size, the screen you were on) attached so we can understand it.
Error reports: when the app hits an unexpected error, it sends the error message, where in the app it happened, the app version and basic device details. They don't include your collection.
A daily value snapshot of your collection, worked out by our server, to draw your value-over-time chart.

We don't collect your location, contacts, advertising identifiers or browsing activity. The camera is only used when you choose to scan a card or take a photo, and scanning happens on your device.

How we use it

To run the app: sync your collection, show values and charts, and keep your account secure.
To fix problems and improve the app, using your feedback and error reports.
To contact you about your account if needed (for example, a password reset you asked for).

Who processes it

Google Firebase (Authentication, Firestore database, Cloud Storage, Cloud Functions, Hosting) stores and processes your account and collection on our behalf.
Price and card data sources (such as Scryfall, TCGdex, Lorcast, SWU-DB, Grand Archive, tcgapi.dev and eBay) receive card names, set and card numbers from our server to look up cards and prices. They don't receive your email or account details.

We don't sell or rent personal information, and we don't share it for advertising.

Your choices

Delete your account in the app: More → Settings → Delete account. This permanently deletes your account, your collection, your photos and your value history.
Export your collection to a spreadsheet: More → Export to spreadsheet (CSV).
Ask us for a copy of your data or to correct it by emailing veryluckysupport@vikingsleystudios.xyz.

How long we keep it

Your account and collection are kept until you delete them. Feedback and error reports are kept for up to 2 years to help fix problems, then deleted.

Security

Data is sent over encrypted connections. Our database rules only let you read and write your own collection. No system is perfectly secure, so please use a password you don't use anywhere else.

Children

The app isn't directed at children under 13, and we don't knowingly collect their personal information. If you believe a child has created an account, contact us and we'll delete it.

Changes

If we change this policy, we'll update the date above and, for significant changes, tell you in the app.