This notice explains what this site keeps about you and why. It is written to be short and plain.
Using the site without an account
- You can rate decks without an account. The decklist you paste is used to work out the score; it is not stored once the answer has been sent back.
- There are no ads, trackers or analytics on this site.
Accounts
- An account is optional. No email address is required, and we do not ask for your real name or any other real-world identity. You choose your own username; we suggest one that doesn't identify you.
- To keep your account working, we store your username, a scrambled (hashed) form of your password, passkey details if you add a passkey, scrambled recovery codes, and sign-in sessions. We keep these for as long as the account exists.
- If you save decks, we store the decklist, its score report, the commander, the name you give it and when it was saved or scored, plus your display settings (such as the impact-flag filter). These are kept so we can show them to you, and only you, when you are signed in, unless you share a deck (below).
- Shared decks are public to anyone with the link. If you set a saved deck to Anyone with the link (or On my profile), anyone who has (or is sent) that link can see the deck's name, commander, decklist and saved score report. Your username is shown only if you tick Show my username (off by default) or while the deck is on your public profile; the source URL you typed is not shown. Shared pages ask search engines not to index them, and we don't count or record who views them. Setting the deck back to Private, making a new link, deleting the deck or deleting your account makes the old link stop working straight away.
- Public profile (optional, off unless you turn it on). If you turn on your profile on the account page, anyone can open
your profile page (
/u/followed by your username). It shows your username, the optional short "about" line you write, and the decks you set to On my profile: each one's commander picture, name and score, linking to its shared page (which then shows your username). It does not show your e-mail (we don't have one), a real name, a picture of you or when you joined. Profile pages ask search engines not to index them, and we don't count or record who views them. While your profile is off, its address shows "not found", exactly as if the username did not exist. Decks set to Anyone with the link or Private are not listed on it. Turning the profile off, or setting a deck back, takes effect straight away. - Friends (optional). You can send a friend request to another player by typing their exact username, and accept or decline requests sent to you. We store who is friends with whom, the requests (with the username as it was typed, and when it was sent) and who you blocked. Nobody is e-mailed or messaged about a request; the only notice is a count of waiting requests next to Friends when the other player is signed in. A person who sends you a request is not told whether you declined it, blocked them, or whether your account exists at all: to them it just shows as waiting. Friends who are signed in can open decks you set to Friends only (and see your username on them) and can see your profile page, with your On my profile and Friends only decks, even while your public profile is off. Anyone else, signed in or not, gets "not found" for those pages. Removing a friend or blocking someone ends their access straight away. Friends-only pages ask search engines not to index them, and we don't count or record who views them.
- Groups (optional). You can make a private group (a name and an optional short description) or join one with an invite code or an invite from a friend. We store each group's name and description, who is in it with their role (owner, admin or member) and when they joined, the invites (an invite code is stored only in a scrambled form, with its last few letters, when it was made, when it stops working, how often it was used and who made it) and which decks each member shares with the group, and (when match tracking is on) games recorded in the group (date, who played, which decks, the winner or a draw, optional turns and a short note, and each deck's power score as it was when the game was recorded), and whether each seated player confirmed or disputed the game, so only games everyone agreed to count in the standings. When live game tracking is on, a game in progress also stores life totals, poison, commander damage, whose turn it is and who has been eliminated, so each seated player can see the same board on their own signed-in device; ending the live game writes a normal recorded game and the live totals are no longer needed, and cancelling it records no match. Only members who are signed in can see a group's page, its member list (usernames only), the decks shared with it and its games; anyone else gets "not found", whether or not the group exists. There is no list or search of groups. Nobody is e-mailed or messaged about a group; the only notices are a count of waiting invites next to Groups and a count of games waiting for your confirmation, and of live game lobbies you can join, next to Notifications. If you decline an invite, the person who sent it is not told. Leaving a group, or being removed from it, ends your access to the group page (your seats in past games stay under your username unless you delete your account) and unshares your decks from it straight away. Group pages ask search engines not to index them, and we don't count or record who views them.
Technical information
- Like any website, the servers that run this site receive technical information such as your IP address and browser type when you visit. The hosting infrastructure may process this to deliver the site and keep it running.
- To stop any one visitor from overloading the site, your IP address is briefly held in the server's memory to count how often you score decks or try to sign in. We aim to keep logs minimal and short-lived, and we do not use them to build profiles of visitors.
Card pictures (Scryfall)
Card pictures are loaded directly from Scryfall, a separate service, when you rest the mouse on a card's name, and the commander pictures on a public profile page are loaded the same way when you open that page. When that happens, your browser connects to Scryfall, so Scryfall sees your IP address. Scryfall's own privacy policy applies to that.
Sharing
We do not sell your information, and we do not share it for advertising. The only things anyone else can see are decks you choose to share by link and, if you turn it on, your public profile with the decks you put on it, what you share with the friends you accept, and the decks you share with groups you're in (seen by that group's members).
Deleting your account
You can delete your account at any time on the account page. This removes your account, your saved decks (and their share links), your public profile and your settings, and also your friends, friend requests and blocks, and your group memberships, invites and deck shares, and anonymizes your seats in recorded games to "deleted player" (games with no remaining players are removed), and abandons any live game you started (your seats there are anonymized the same way). A group you own is handed to its longest-standing admin (or, without one, its longest-standing member); a group with no one else in it is deleted. Requests other players sent to your username stay on their own list as waiting, under the name they typed, without any link to your deleted account. We keep backups of the site's data for up to 14 days, so a deleted account can remain in backups for up to 14 days before it is gone from them as well. On the same page you can also download a copy of your data (including your profile settings, your friends, requests and blocks as usernames, your groups with their names, your role, dates and which of your decks you shared there, and games you played or recorded in a group, and live games you hosted or sat in without the in-game life totals).
