Privacy Policy

Information We Collect

Google account data. When you sign in with Google, we ask only for your basic profile (the openid, email and profile permissions), and Google gives us your Google account ID, name, email address and profile photo. These are stored with your account in Firebase Authentication and Firestore, which Google runs for us. We use them to sign you in, to match Premium payments to your account, and to find your account when you contact us for support. Your Google name goes on something you publish only if you type it yourself as your name, and your Google photo is never put on anything new. Decks and comments you published before public pages existed keep the name and photo they had until you choose a name, on your page or in Settings, and if that is your Google name, your public page shows it too. Your email address goes to Stripe when you subscribe on the website, as described below. We don't sell this data or use it for advertising. We never see your Google password, and we have no access to your Gmail, contacts, files or anything else in your Google account.

When you save a deck, we store the deck name, commander name, raw decklist text, and analysis results (power score, bracket, color identity, card count). This data is associated with your account and stored in Firestore. Saving also publishes the deck on Community, Explore and search, with your display name; you can remove it from Community at any time with the “On Community” button on the deck, and it stays saved to your account.

Settings you choose for your account are stored with it, so they follow you to other devices: which marketplace's prices to show (TCGplayer in US dollars or Cardmarket in euros), your preferred printings, the tags you give cards, and whether the Discord's deck of the week may feature your public decks. Only you can see them, except that a published deck shows the tags you gave its cards. If you connect Discord, your Discord user ID and username are stored with your account too, as described under Discord.

When any deck is analyzed — even without saving or signing in — we keep an activity log of that analysis. This includes the full list of cards submitted, the deck source (e.g. an Archidekt link or pasted text), the analysis result, and basic technical details such as a timestamp, a coarse device category ("mobile", "tablet", "desktop" or "bot"), the page you were on, and your account ID if you are signed in. The same details are recorded for other actions like creating, building, or publishing a deck. We use these logs to keep a record of analyzed decks (so a deck can be recovered even if it was never saved), to monitor for errors and abuse (our legitimate interest in keeping the service secure), and to understand usage in aggregate so we can improve EDHcheck. Errors encountered while using the site may also be logged.

What we deliberately don't keep. We do not store your IP address or your browser's user-agent string. Your IP is used only in memory, to apply rate limits, for at most half an hour (to count a deck view once, as a scrambled key), and is never written to our database; the only thing derived from your user agent is the coarse device category above. Activity logs are automatically deleted after 90 days.

If you submit feedback through the in-app feedback button, we store your message along with your account ID, display name, and email so we can read and act on it.

If you report that an analysis looks wrong (“Was this analysis wrong?”), we store the bracket and power level you suggest, your message, the deck's commander, name and card count, the page you were on, and your account ID and email if you are signed in, so we can follow up.

If you answer the Turn Clock question (“does this deck usually win around this turn?”), we store your answer, the turn the clock showed, the deck's bracket, power level, commander and decklist. This is anonymous: no account ID, email or other detail about you is stored with it, so it can't be linked back to you. We use these answers only to make the Turn Clock more accurate.

If you subscribe to Premium on the website, we store your subscription status, Stripe customer ID, and Stripe subscription ID in Firestore so the site can check your Premium access. If you buy Premium in the iPhone app, we store what the App Store reports about it through RevenueCat (described under The EDHcheck App): which plan, when it renews or ends, whether it will renew, whether it was a test purchase, had a payment problem or was refunded, and when and how we last checked. Either way we store where your Premium comes from. We do not receive or store your card number or other payment details — those go directly to Stripe or to Apple, described below.

How We Use Your Information

• To sign you in to your account.
• To display your saved decks on your personal dashboard.
• To show deck history and power-level trends over time.
• To enable real-time pod lobbies with other users.
• To grant and manage Premium subscription access.

We do not sell your data. We share only what's necessary with the service providers listed below (e.g. Stripe, to process Premium payments on the website, and RevenueCat, to check Premium bought in the app) to run the site.

Public Profiles & Following

When you publish a deck to Community, you get a public page. Anyone can see it and follow you. An account with no public deck has no page, and if you stop having any public decks, your page disappears. If you publish again it comes back with what you had saved.

Your page shows the name on your public decks, those decks, and numbers worked out from them: how many there are, their colors and brackets, your most-used commanders and their views. It lists only decks you have published to Community, never private decks or decks shared by link. If you sort your decks into folders in My Decks, the folders' names are public too, so your page can group your published decks by them; which private or link-only deck is in which folder is never shown. When you view your own page you also see your private decks, marked hidden; nobody else does. Everyone with a page is listed under Deck builders.

The first time you sign in after you have a page, we ask you to keep that name or write your own. The name you choose, there or by changing your name in Settings, appears on your page, your published decks and your comments, including the ones you have already posted. We make a handle from it, which you can change, and people can then find you by name or handle when they search for deck builders. Until you choose, your page keeps the name already on your decks, and that search doesn't find it. If you signed in with Google, new decks and comments never take your Google name unless you type it yourself: until you choose a name they use the one on your page or, if that is your Google name, a random name we generated, such as ArcaneGoblin4821. Your page and anything new you post never show your Google photo.

A picture, banner (an image or a colour) and bio appear only if you add them, and you can remove them at any time. Once you have added one, your page also shows the month you joined. Everything else about your account, including your email address, stays private.

If you follow a builder, that is public too: if you have a page, your name appears in their followers, and they appear in the list of who you follow. If you have no page you are counted but not listed, though the record of the follow, which holds only your account id, can be read publicly. We use follows to show you new decks from the builders you follow.

We show public pages because of our legitimate interest in running a community around the decks people choose to publish. You have the right to object to this at any time. You can ask us to remove your page without deleting your account: contact us and we will hide it, and it stays hidden if you publish more decks. Hiding a page also deletes any picture and banner you uploaded and takes the picture off your comments. Your published decks stay on Community under their name unless you make them private. Deleting your account also removes your page, as described below.

If you report a profile, we store your account id, the profile you reported, the reason you chose and anything you wrote, so that we can review it. We never tell the person you reported who reported them. We delete a report once we have dealt with it, and when the account that sent it, or the account it is about, is deleted.

Your Collection

If you keep a card collection here, we store the cards in it and what you record about them: quantity, printing, finish, condition, language, folder and flags, and what you paid and your notes if you enter them. It is private unless you share it. A shared collection can be seen by anyone with its link or from your profile, and leaves out what you paid and your notes. When you import a file, it is read in your browser and not uploaded: only the cards' names, sets, collector numbers and Scryfall ids are looked up on Scryfall. Deleting your collection, or your account, deletes it, shared copy included.

The EDHcheck app also keeps your collection's value history with it: each card's price when it joined your collection and the collection's total value on each day you open it, from the same price data the collection shows. It is private, is never part of a shared collection, and is deleted with your collection or your account.

The EDHcheck App

The EDHcheck app uses the same account and the same services as this website, and everything on this page applies to it too. What is different:

Camera and photos. The app uses your camera only while the card scanner is open, and your photo library only when you choose a profile picture. The scanner reads the cards it sees on your phone, by the phone's own text recognition: no picture is taken, kept or uploaded, and only what was read from a card, its set and collector number or its name, is looked up on Scryfall. A profile picture you choose is uploaded as described under Public Profiles & Following.

Error reports. When the app runs into an error, it sends the error's name and message, the app's version, whether your phone runs iOS or Android, and where in the app's code it happened, to the same activity log as the website's errors, with your account ID if you are signed in. No IP address, device identifier or email address is stored with it, and it is deleted after 90 days. If you have chosen to share analytics with app developers in your phone's settings, Apple or Google may also send us anonymous crash reports.

Reports and blocking. When you report a deck or a comment in the app, we store your account ID, the reason and any note you add, and what you reported (for a comment, its text and its author), and for a comment your display name too, so we can review it. Blocking someone hides their comments on your phone; the list of people you have blocked is kept only on your phone.

Premium bought in the app. Premium bought in the iPhone app is paid to Apple through the App Store: Apple takes the payment and holds your payment details under its own terms and privacy policy, and we never see them. The app uses RevenueCat (RevenueCat, Inc.) to check App Store purchases. RevenueCat receives your EDHcheck account ID while you are signed in to the app (otherwise a random ID it makes for the app on your phone), the purchases and subscriptions made in the app as Apple reports them, and your phone's locale and currency. It gets no name, email address or payment details from us. Our server asks RevenueCat whether your account has Premium and stores the answer with your account, as described above, and when that Premium starts or ends, the activity log notes it with your account ID, the plan and whether it was a test purchase or refunded. RevenueCat's privacy policy applies to what it holds.

On your phone. The app keeps your settings, your recent analyses, deck changes not yet saved, and a cache of card data and prices on your phone, so it works faster and remembers your choices. They stay on the phone and are removed when you delete the app.

No ads or tracking. The app shows no ads and contains no advertising or analytics services (RevenueCat, above, handles purchases only), and it doesn't track you across other companies' apps or websites.

Discord

The EDHcheck bot. When you use one of the bot's commands in a Discord server, Discord sends us the command with your Discord user ID and the server's ID. For /analyze we analyse the deck you give it and note the analysis in our activity log with the deck you sent, the server's ID and your Discord user ID, and it is deleted after 90 days. /pro and the Claim Pro role button only look up whether your Discord account is connected to an EDHcheck account, and store nothing.

Connecting Discord. In Account Settings you can connect your Discord account. Discord then asks you to let us see your Discord user ID and username and add you to the EDHcheck Discord server. When you agree, we store your Discord user ID and username with your account, add you to the server, and give you the Pro role there while you have Premium, whether bought on the website or in the app. Discord's sign-in token is used once and revoked straight away: we keep no Discord tokens. Disconnecting in Account Settings, or deleting your account, deletes your Discord user ID and username from our records and takes the Pro role away; leaving the server is up to you. If a change to your role fails, our activity log notes it so we can put it right, and the note is deleted after 90 days.

Deck of the week. Once a week the bot posts one public deck in the EDHcheck Discord server, picked from decks listed in Community whose builders have confirmed a public name. The post shows the deck's name, commander, bracket, power score and art, the builder's public name with a link to their profile, and a few sentences about the deck. Those sentences are written by an AI model run by Anthropic from the deck's public details: its name, commander, colours, combos, card list and the builder's description. No name or account ID is sent. We keep a record of which deck and builder were featured each week, so the same ones aren't picked again too soon. To keep your decks out of it, untick “Let the Discord's deck of the week feature my public decks” in Account Settings. If you delete your account, posts that featured your decks are deleted from the server.

Discord's own privacy policy applies to what you do on Discord.

Third-Party Services

Card data, images, and prices are fetched from Scryfall. Deck imports from Archidekt, Scryfall, Deckbox, TappedOut and MTGTop8 are processed server-side via their public APIs or export links; we do not retain a copy of any data from those services beyond what appears in your analysis results.

Authentication and data storage are provided by Google Firebase. Their privacy policy applies to data storage and authentication.

Premium subscriptions bought on the website are paid through Stripe. Stripe collects your payment details (card number, billing address) directly — we never see or store them — along with your email address, so payments can be matched to your account and Premium access granted. Their privacy policy applies to this payment data. Premium bought in the iPhone app is paid to Apple and checked through RevenueCat, as described under The EDHcheck App.

Premium In-Depth Analysis and the Deck Primer are generated by an AI model run by Anthropic. When you run one of these, the contents of the deck and any strategy note you choose to add are sent to Anthropic so the analysis can be written. Your name, email address and account ID are never included — the request contains the decklist and nothing that identifies you. Output produced this way is labelled “AI generated” where it appears on the site. The same model writes the few sentences in the Discord's deck of the week from a public deck's details, as described under Discord.

A deck's About can include YouTube videos. Nothing is loaded from YouTube until you press play on one; then the video plays from YouTube (its privacy-enhanced youtube-nocookie.com player), which receives your IP address and may set cookies under its own privacy policy. Images in a deck's About are shown only from Scryfall; any other image is a link you can choose to open.

Messages you send with the contact form, on the website or in the app, go through Formspree, which delivers them to our inbox with the email address you enter, and your name and topic if you give them. Their privacy policy applies to how they handle it.

Consent management is provided via Cookiebot, which records and enforces your cookie preferences in line with GDPR requirements.

Advertising

EDHcheck uses Google AdSense to display advertisements. Google AdSense is operated by Google LLC. When you visit pages on this site, Google may use cookies, web beacons, and similar technologies to serve ads based on your prior visits to this website and other websites on the internet.

Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to EDHcheck and/or other sites on the internet. Google AdSense uses the DoubleClick cookie to serve more relevant advertisements across the web and to limit the number of times a given ad is shown to you.

You can opt out of personalised advertising by visiting Google's Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising by visiting aboutads.info.

Ads are only served after you have granted cookie consent via the Cookiebot banner that appears on your first visit. You can change or withdraw your consent at any time by clicking the cookie icon in the footer.

For more information about how Google collects and uses data from sites that use its advertising services, see How Google uses data when you use our partners' sites or apps.

Data Retention & Deletion

Your data is retained as long as your account exists. You can delete individual decks from your dashboard at any time.

Deleting your account, in Account Settings on the website or under Account, then Profile, in the app (step by step on Delete your account), removes your account profile, your public profile and handle, the follows to and from your account, your private decks and builds, any feedback you have sent us, and your Discord connection, Pro role and deck of the week posts, as described under Discord. Decks published to Community and comments you posted are not deleted, but your name and photo are removed from them and they appear as belonging to “Deleted user”. They stay online because other people may have saved, linked or replied to them, and once your name is gone they no longer identify you. Activity logs are deleted automatically after 90 days.

If you would rather your published decks or comments were removed entirely, or you want a copy of the data we hold about you, email [email protected] or use the contact form and we'll process the request.

If you pay for Premium on the website, deleting your account cancels the subscription automatically. The cancellation takes effect immediately and you will not be charged again. Premium bought in the iPhone app is billed by Apple, and deleting your account can't cancel it: cancel it in your iPhone's Settings (tap your name, then Subscriptions), as Apple explains. Deleting your account also deletes what RevenueCat holds about it.

Cookies & Local Storage

EDHcheck uses sessionStorageto pass analysis results between pages. Firebase Auth uses local storage to persist your login session, and the site keeps a few choices there, such as which marketplace's prices to show and how you like deck lists laid out, so pages remember them. Cookiebot is used to manage cookie consent preferences and Google AdSense may set cookies when consent is granted.

Changes to This Policy

We may update this policy as the product evolves. Significant changes will be noted at the top of this page with a new effective date.