Privacy

Cards and photos

Your collection, card photos and recognition stay on your device. Private deck lists stay local until you choose Share or Publish. Photos are stored in the app sandbox, without camera metadata and outside backups. Undo and deleting a card remove its photos. CSV exports contain card text and counts, not photos. Deleting the app removes its local collection and photos. The free-scan allowance is kept in Keychain and may remain after reinstall.

Shared decks

Share creates a public link and sends the deck name, card IDs, counts and chosen champion to SleeveSprite’s Cloudflare service. The service stores only that deck list. It does not receive your photos, private collection, name, email, account or device ID. Anyone with a link can view and import its deck. Shared lists remain available until removed. Contact support with the link to request removal.

Cloudflare handles network requests and basic rate limiting. SleeveSprite does not enable request or payload logging, advertising, tracking or analytics. Network services necessarily receive IP addresses and request headers; these are not stored with a deck. Cloudflare privacy policy.

Deck discovery

SleeveSprite includes original curated deck lists and downloads the same discovery file for everyone from its Cloudflare service, at most daily. Card-to-deck lookup, owned and missing counts, and completion cost are calculated on your device. Browsing and importing do not send scans, photos or collection contents to the service. Sharing a curated or edited deck uses the shared-deck flow above.

Social accounts

Browsing and importing decks do not require an account. Sign in with Apple is used for publishing and upvotes. SleeveSprite stores your provider account identifier, public handle, verified email for authentication, publications, votes, blocks and reports on Cloudflare. Emails and sign-in credentials are never shown publicly. Only your handle, published deck name, description, card IDs and counts appear in the gallery. Card photos, scans, collection contents and private decks are not sent with your account.

Sign-in sessions are stored in the device Keychain and expire after 30 days. The service stores only a hash of each session secret. Apple refresh tokens are encrypted server-side for consent revocation. Unpublish removes a publication from the service. Delete account in Social → Account removes your account, publications, votes, blocks, reports and sessions. Private decks and collection photos remain on your device. Copies other people already imported remain on their devices. During an Apple outage, an encrypted token-only revocation job may remain for up to seven days.

Reports and safety

Report a deck in the app or on its web page. Reports may be anonymous. Signed-in reports are associated with the account for abuse prevention; anonymous reports contain only the deck link, reason and time. Reports are retained for up to 90 days. Blocking without signing in stays on your device; signed-in blocks also apply through your account. Deck names, descriptions and handles are filtered, and established-account reports can hide a deck pending review. Contact affirmindapps@gmail.com with complaints or removal requests.

Catalog and prices

SleeveSprite downloads the same public catalog and price files for everyone, at most daily, from RiftHunt. No photos, recognition text, deck lists, collection contents or app identifiers are sent to that provider. Cached files work offline. Market values are TCGplayer USD prices, specific to printing and finish. They do not account for condition, fees or shipping.

SleeveSprite uses factual card metadata, not downloaded official art. Card pictures are your photos or original practice assets. Riot Games does not endorse or sponsor SleeveSprite. Riftbound and its card names are Riot Games’ property.

Purchases

Apple handles purchases and subscriptions. SleeveSprite does not receive payment-card information. Restore Purchases verifies your access through Apple.

Contact

NS EC HOLDINGS, LLC · Updated October 12, 2026