Privacy policy
Besti, by Theo Builds LLC. In effect from 7 October 2026.
In short
- Besti has no accounts and no adverts, and does not track you.
- Your collection, your photos and your prices stay on your phone.
- Unless you switch it off, Besti sends counts of how the app is used, with nothing that says who you are.
- We do not sell information about anyone.
What stays on your phone
Everything you put into Besti is kept on your phone and is not sent to us:
- the cards you own, your binders and their names, your decks and your goals
- the cards you hunt, your target prices and what you paid
- photos you take in the app, and the pictures of pages you scan. Cards are recognised on the phone itself.
- backup files. A backup is a file you save where you choose; we never receive it.
Deleting the app deletes all of this from the phone.
What Besti sends to us
Settings has a switch under Privacy called “Share how the app is used”. It is on when the app is first installed. While it is on, Besti sends our server counts of what is done in the app:
- that the app or one of its tabs was opened
- a search, as the name of the card it was for. A search that found nothing is sent as typed, up to 40 letters.
- that a card was opened, a hunt was started or ended, or a copy was added or taken out, with which card it was
- that a page was scanned and how many pockets were read, or that a card’s listings were opened
- once a week, the size and shape of your collection in broad bands, such as “50 to 499 cards” or “worth $100 to $500”
Each count carries the day it happened, but not the time. With them go a random number made on your phone, the app’s version, the iOS version, the phone’s model and its language. The random number lets us count how many different phones did something. It is not your name, your Apple Account or an advertising identifier, and deleting the app makes a new one.
What is never sent
Your name, email or any account. The list of cards you own or hunt, or what they are worth as a number. Your photos. A price you paid or set as a target. The names of your binders. Where you are.
What we do with the counts
- They make the Popular lists in Search. A search appears there only once five different phones have made it.
- They show us which parts of the app are used, so we know what to improve.
Our server scrambles the random number before keeping it, and does not keep your internet address or the time of day with the counts. Counts are deleted after 90 days.
Turning it off
Open Settings in Besti, then Privacy, and switch off “Share how the app is used”. Nothing more is counted, and whatever was waiting to be sent is thrown away. “See what is shared” on the same page shows exactly what is waiting.
Other services Besti talks to
To show prices, card pictures and card text, Besti fetches them over the internet. Like any request on the internet, each one shows the service your internet address and which card or set was asked for. We send these services nothing else about you. They are:
- our own server for prices, run on Vercel with a database at Turso
- TCGCSV and TCGplayer, for prices and card pictures
- TCGdex, for card pictures and card text
- Limitless TCG, for deck lists and tournament results
- GitHub, for pictures of Simplified Chinese cards
Our host may keep ordinary logs of requests, including internet addresses, for a short time to keep the server running and safe. We do not join those logs to the counts above.
When you tap a button that opens a shop’s listings, such as TCGplayer, the shop’s page opens and the shop’s own privacy policy applies there.
Permissions Besti asks for
- Camera, to scan cards and binder pages. The pictures are read on your phone.
- Photos, only to save a picture you choose to save. Besti cannot look through your photo library.
Children
Besti is not directed at children under 13, and we do not knowingly collect personal information from them. As Besti has no accounts, we do not know who its users are.
Your choices
You can switch off sharing at any time, as described above. Because the counts carry nothing that says who sent them, we cannot pick out the ones that came from your phone; they are deleted after 90 days in any case. If you write to us, we keep your message and address for as long as it takes to answer you.
This website
This website sets no cookies and has no analytics. Its host may keep ordinary request logs, as above.
Changes
If this policy changes, the new one will be put here with a new date. If a change means more is sent from your phone, the app will say so before it starts.
Contact
Theo Builds LLC, support@theobuilds.app.