Privacy

Last updated 14 September 2026. Plain English, no lawyer-speak. If anything here is unclear, email and ask.

What we collect

When you sign in, we store your email address and a display name. If you sign in with Google, Google shares your name and email address with us, nothing else.

Everything else we hold is what you do in the app: the events you join, your match results, rating, booster counts, any decklist you submit for review, and your Collection folders.

We do not run ads. We do not use analytics or tracking of any kind. We do not sell anything to anyone.

Who can see what

Other players in an event can see your display name, rating, win-loss record and the results behind that rating.

The organizer of an event you join can additionally see any decklist you submit, your booster deliveries, and your activity in that event (joins, match reports, disputes). That's the point of deck verification. They need to see the list to check it.

A shop's staff see the same as its owner for that shop's events. A shop owner adds staff with an invite link, and can remove them at any time. Who is on a shop's staff is visible only to that shop's owner and staff.

Your Collection folders are private to you unless you mark one for trade or as a want list. Then any signed-in player can see its cards, next to your name.

Links you share are public. The Share button on a booster, your pool, your deck or a folder makes a page that anyone with the link can open, without an account. It shows your display name and a copy of those cards as they were when you shared them, and it is kept out of search engines. Remove it from Account settings and the page is gone.

Who else is involved

Google Firebase handles sign-in, the database, and hosting. Your account and event data live on Google's infrastructure and are covered by Google's privacy terms.

Scryfall provides card search. When you type in the card search box, that request goes directly from your browser to Scryfall, meaning your IP address and what you typed reach them. We don't send them anything else about you, and we don't have an account relationship with them.

Your browser stores a sign-in token so you stay logged in. That's not an advertising cookie and isn't shared.

Deleting your account

You can delete your account yourself: sign in, then open Account settings. Here's exactly what happens.

Erased completely: your sign-in account, every Collection folder you've made, every decklist you've submitted to any event, and every link you've shared.

Anonymized, not erased: your player row in events you took part in. Your name is replaced with "Deleted player" and your deck name is cleared, but the row itself stays. It has to. Your opponents' match results and ratings were calculated against it, and deleting it would corrupt their history too.

This can't be undone. If you'd rather have a human do it, email titandras@gmail.com instead.

Age

This app is intended for people aged 13 and over.