Privacy & Security

A scan sends the image of the card to Tappr's servers for identification, along with basic device and app-usage information used to keep the service running smoothly. The scanned image itself is used only to identify the card in the moment — what's actually saved to your account is the resulting card data (name, set, collector number, condition, and so on), not a permanent copy of the photo.

Your account is protected by your chosen sign-in method — email and password, or a social sign-in option — and data in transit and at rest is encrypted using industry-standard practices. Using a strong, unique password, or a supported social sign-in with its own security protections, is the best way to keep your account secure on your end.

You can request account deletion from the Settings screen in the app. Deleting your account permanently removes your collection data and account information from Tappr's servers, so if you want to keep a record of your collection, export it first — account deletion cannot be undone.

Card images are used to identify the card at the moment you scan it and are not kept as permanent photo storage tied to your account. Once a card is identified and added to your collection, what's saved is the structured card data, not the original picture you took of it.

No. Tappr does not sell or rent your personal data or collection information to third parties for marketing or any other purpose. Aggregated, anonymized usage data may be used internally to improve scanning accuracy and the overall app experience, but it isn't tied back to you individually or shared outside the company.

Use the "Forgot Password" link on the sign-in screen to receive a reset email, then follow the link to set a new password. If you originally signed up through a social sign-in option, use that same provider to log back in rather than trying to reset a password that was never set.