Privacy

• Your account: your email address, the display name you choose (optional), and your password as a bcrypt hash. We never store the password itself and can't read it.
• Your setup picks: the games, archetypes and styles you pick when setting up your account.
• Things you make or save: decks and packages you create, favorites, your collection and your wishlist.
• Activity while signed in: cards, decks and packages you open, cards you add to a deck, packages you apply, and the text of searches you submit. This is used to shape your For You page. Nothing is recorded while you are signed out.
• Assistant and deck generator history: deck-assistant actions, generated decks, saved prompts and feedback on recommendations, if you use those features. They are yours and are deleted with your account.

Signing in sets one session cookie. It holds a signed token that says who you are, so you stay signed in. It lasts up to 30 days (the default of the sign-in library we use) or until you sign out. We don't use advertising or tracking cookies, and there are no analytics scripts on the site.

Some settings stay in your browser's local storage only, and are never sent to us as a record: the game you picked, the layout density, the Pile of cards you're collecting, the deck panel and an unsaved deck draft. Clearing your browser's site data removes them.

• Cloudflare Turnstile checks you are a person when you create an account. While the check runs, Cloudflare sees your IP address and browser details, and we send it your IP address with the check.
• Anthropic (the company behind the Claude AI models) gets some text when AI features are switched on:
  • the text of a search or chat question, with the game and the kind of search, so it can be read as a search;
  • the short explanation our search already wrote, so it can be reworded (it is checked so no new facts get in);
  • a new package's name, type, game and summary, to suggest tags for it.
  We don't send your email, name or account id with any of these.
• Hosting: the database runs on Neon (Postgres). The plan is to run the website on Vercel, the API on Fly.io and card images on Cloudflare R2; those three are planned and not set up yet. Hosting providers see the requests that pass through them, including your IP address. [owner: confirm each provider's region and log retention before launch]
• Card images from Scryfall: once Magic cards are live, their images load straight from Scryfall, so Scryfall sees your IP address when you view them.

We don't sell your data, and there are no ads.

To stop one visitor from overloading the site, we count requests per IP address (and sign-in attempts per email address) for a short window, from a minute up to an hour. These counts are kept in the server's memory only and are not written to the database.

You can delete your account yourself at Delete account (also in the account menu). It removes your account and the data listed above: your decks, packages, favorites, collection, wishlist, setup picks, activity and saved prompts. Shared things you only edited stay, without your name on them. It can't be undone.

Our database provider keeps a short restore history, so deleted data can stay in a backup until that history rolls over. [owner: state the restore-history window before launch]

Questions or requests about your data: admin@tcgforge.gg. [planned mailbox: it must exist before launch]

[owner to decide: minimum age for an account, and who the data controller is (name and country)]