Privacy Policy

What data is collected

• Email address — used to sign in via a one-time magic link (no password on the main app). Also stored for group ownership, roster invites, and optional contact on feedback.
• Playgroup data you enter — match records (pods, players, decks, commanders, pilots, results, notes), roster entries, and ratings (Elo) derived from matches. This may include other players' names if you or your group enter them.
• Feedback — if you use the contact form: message, optional email, group context, app version, and a short browser user-agent string.
• Usage analytics — Google Analytics 4 to understand how the site is used (for example pages visited, approximate region, device type). Google may use cookies or similar technologies. See Google's privacy policy.
• Browser local storage — on your device only (for example last group visited, pending sign-in email, cached card art). This is not sent to our servers as a separate upload.

There is no advertising, no sale of personal data, and no location tracking beyond what analytics providers may infer.

Why this data is collected

• Email and sign-in — to provide the account and login you request. Lawful basis (GDPR): performance of the service (Art. 6(1)(b)).
• Playgroup data — to run the core tracker (stats, leaderboards, history). Same lawful basis.
• Analytics — to understand and improve the service. Lawful basis (GDPR): legitimate interest in operating and improving a free tool (Art. 6(1)(f)), where applicable.
• Email from us — your email is used for sign-in links, essential account or security notices, and occasional service-related messages. It is not used for marketing unless you have separately opted in. You may ask us to stop non-essential emails at any time via the contact form.

Public group links

Anyone with a playgroup URL can view that group's stats without signing in. That includes match history, leaderboards, and player or deck names visible in the app. Do not put sensitive information in match notes or group data.

Card images (Scryfall)

The app loads public card art from the Scryfall API. Your personal data is not sent to Scryfall as part of normal deck or commander search.

Who your data is shared with

Your data is not sold, rented, or shared with advertisers for their own purposes.

Service providers process data only to run the app:

• Google Firebase — authentication and database (Firestore)
• Netlify — website hosting
• Google Analytics — usage statistics

Other members of your playgroup (and anyone with the group link) may see game data you participate in. That is inherent to a shared playgroup tracker.

How long data is kept

Data is kept while your account and playgroups exist and as needed to operate the service. Group owners can export data in the app (JSON or CSV). To delete your account or request removal of personal data, contact us via the homepage feedback form. Match data that involves other players may be retained in reduced or anonymized form so their records stay coherent.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. To exercise these rights, use the contact form on the homepage. We will respond within a reasonable time (typically within 30 days).

Security

Reasonable measures are used to protect your data. Sign-in uses email magic links handled by Firebase. No online service can guarantee absolute security.

Children

This app is not intended for children under 16. Do not create a group or sign in if you are under 16.

Changes

This policy may be updated. Material changes will be reflected by updating the "Last updated" date above.