Privacy policy

The short version

• You can use the deck tool without an account. Nothing you paste is stored on our servers unless you save it.
• What you submit — decks, collections, votes — is used to run the site and improve its recommendations.
• We never sell your data, and never use it for anything else. No ads, no advertising or analytics trackers.
• You can delete your account at any time from your account page.

What we collect

Your account

Your email address. If you sign in with Google, Google also shares your name and profile picture address, which our sign-in provider stores with the account. We also keep the display name you choose, and when you signed up and last signed in.

Decks you save

The deck's name and its cards. The text you pasted is not kept. New decks are public, so anyone with the link can see them; you can make a deck private from its page.

Your collection

If you import a collection while signed in: each card, and the printing, finish, condition and language when your file includes them.

Votes

When you rate a suggested replacement, we keep the vote along with what was on screen at the time (the other suggestions shown and their order), so we can tell which suggestions work.

Suggestions you see

When the deck tool shows you cards to add, cut or swap, we record which cards it showed and in what order, and which ones you took or passed on, with the deck's commander and bracket. It tells us how good our suggestions are. It is kept like votes: with your account if you are signed in, otherwise with the salted hash below, and there is no setting to turn it off.

A salted hash of your IP address

To stop abuse we count requests per visitor. We never store your IP address itself, only a one-way hash of it mixed with a secret value. People sharing one network share one hash.

Commander deck lookups

When you ask us to gather decks for a commander, we keep the request and that salted hash, to apply limits.

What stays in your browser

Signed out, your last deck is kept in your browser for 30 days and an imported collection for 7 days, so you can pick up where you left off. A few settings (like "only cards I own") are remembered the same way. None of it is sent to us until you use it. Clear it with your browser's site data settings, or the Clear button in the deck tool.

The only cookies we set keep you signed in. There are no advertising, analytics or tracking cookies.

How we use it

Anything you submit — decks, collections, votes and lookups — becomes part of how the site works and is used to improve its recommendations. For example, complete saved decks feed the play rates shown on card and commander pages, and votes tell us which replacements are good ones. Private decks are hidden from other people but still count toward those statistics, which are totals with no names attached.

That is the only thing we use it for. We do not sell your data, rent it, share it with advertisers, or use it for any other purpose — ever.

Who else handles it

We use a small number of services to run the site. Each only handles data as needed to provide its service:

• Supabase stores the database and handles sign-in.
• Vercel hosts the site and keeps short-lived request logs.
• Google, if you choose to sign in with it.
• An email provider, to send your sign-in codes.
• Card images load directly from Scryfall, so your browser contacts Scryfall's servers when showing them.
• When you import a deck or collection by pasting a link, our server fetches that link from the site it points to.

Deleting your account

You can delete your account from your account page. That removes your profile, your saved decks (their links stop working) and your collection. It can't be undone.

Some things are kept after deletion:

• Your email address and account id, in our internal records. We keep these to prevent abuse, such as banned users signing up again or one person running many accounts. They are not used for anything else.
• Your votes and the suggestions you took or passed on, with nothing left that links them to you.
• Statistics your decks contributed to, which never contained your name.

Children

The site is not directed at children under 13, and we do not knowingly collect their data.

Changes and questions

If this policy changes, the date at the top will change with it. Questions can go to the project's issue tracker.