Privacy Policy

This page explains what information this site keeps, why, and what you can do about it. The site is a free, personal project run by an individual. It is not a store, and it does not sell your information.

What the site stores

• Account details: your email address and a securely scrambled (hashed) version of your password. The site cannot see your password.
• Two-factor sign-in: if you turn it on, the data needed to check your authenticator app codes and your recovery codes.
• Your profile: the display name and avatar card you choose, your theme and page-size choices, and when you created your account and last signed in.
• What you enter: your collection, binders, decks, wish list, trade list, tags, notes and friend connections.
• Sharing settings: what you have made private, shared with friends, or public, and the link addresses for anything public.

Who can see it

• Your lists are private by default. Only you can see them unless you choose to share.
• Friends: people you have accepted as friends can see only what you set to “friends” or “public”.
• Public: anything you set to public can be opened by anyone who has the link. Don’t share anything you want kept private.
• The site administrator can manage accounts and has technical access to the database and server, as is needed to run the site. Your content is not reviewed or used for anything else.

Cookies and your browser

The site uses a small number of cookies, all needed for the site to work:

• a sign-in cookie, so you stay logged in;
• security cookies that protect forms from forgery;
• setting cookies that remember your theme (light, dark, auto), page size, collection sort and deck view.

Some filter choices are remembered in your browser’s own storage on your device. There are no advertising or tracking cookies, and no analytics services are used.

Other companies

Card pictures and mana symbols are loaded straight from Scryfall’s servers, so your browser contacts them when a page shows cards, as it would any website. Their own policies apply to that. Card data and community function labels also come from Scryfall. Your personal information is not sent to Scryfall. Nothing here is shared with advertisers or data brokers.

Server logs and security

Like most websites, the server keeps ordinary technical logs (such as your internet address, the page requested and the time) for security and fixing problems. Passwords are hashed, the site is served over an encrypted connection, and regular backups are kept to guard against data loss. No system is perfectly secure, so please use a strong, unique password and turn on two-factor sign-in.

Email

At the moment the site does not send email. If that changes, email will be used only for account matters such as password resets, and this page will be updated.

Your choices

• See and export: you can view everything you entered, and export your collection from the Collection page.
• Change: you can edit or remove anything you entered at any time, and change who can see your lists under Settings.
• Delete: you can delete your account and all your data from your profile. This is permanent. Ordinary backups are overwritten as they age out.

Children

The site is not meant for children under 13, and accounts should not be created for them.

Changes

This policy may change as the site does. The date at the top shows the latest update. See also the Terms & Legal page.

Contact

Questions about your data, or a request to remove something, can be sent to the site administrator.