The fine print
Privacy Policy
Last updated: August 2026
Information We Collect
When you sign in with Google, we store your Google account UID, display name, and profile photo URL in Firebase Firestore. We do not receive, store, or have access to your Google password or any sensitive account information.
When you save a deck, we store the deck name, commander name, raw decklist text, and analysis results (power score, bracket, color identity, card count). This data is associated with your account and stored in Firestore.
When any deck is analyzed — even without saving or signing in — we keep an activity log of that analysis. This includes the full list of cards submitted, the deck source (e.g. a Moxfield/Archidekt link or pasted text), the analysis result, and basic technical details such as a timestamp, a coarse device category ("mobile", "tablet", "desktop" or "bot"), the page you were on, and your account ID if you are signed in. The same details are recorded for other actions like creating, building, or publishing a deck. We use these logs to keep a record of analyzed decks (so a deck can be recovered even if it was never saved), to monitor for errors and abuse (our legitimate interest in keeping the service secure), and to understand usage in aggregate so we can improve EDHcheck. Errors encountered while using the site may also be logged.
What we deliberately don't keep. We do not store your IP address or your browser's user-agent string. Your IP is used momentarily, in memory, to apply rate limits and is never written to our database; the only thing derived from your user agent is the coarse device category above. Activity logs are automatically deleted after 90 days.
If you submit feedback through the in-app feedback button, we store your message along with your account ID, display name, and email so we can read and act on it.
If you subscribe to Premium, we store your subscription status, Stripe customer ID, and Stripe subscription ID in Firestore so the site can check your Premium access. We do not receive or store your card number or other payment details — those go directly to Stripe, described below.
How We Use Your Information
- To display your saved decks on your personal dashboard.
- To show deck history and power-level trends over time.
- To enable real-time pod lobbies with other users.
- To grant and manage Premium subscription access.
We do not sell your data. We share only what's necessary with the service providers listed below (e.g. Stripe, to process Premium payments) to run the site.
Third-Party Services
Card data, images, and prices are fetched from Scryfall. Deck imports from Moxfield, Archidekt, and TappedOut are processed server-side via their public APIs; we do not retain a copy of any data from those services beyond what appears in your analysis results.
Authentication and data storage are provided by Google Firebase. Their privacy policy applies to data storage and authentication.
Premium subscription payments are processed by Stripe. Stripe collects your payment details (card number, billing address) directly — we never see or store them — along with your email address, so payments can be matched to your account and Premium access granted. Their privacy policy applies to this payment data.
Premium In-Depth Analysis and the Deck Primer are generated by an AI model run by Anthropic. When you run one of these, the contents of the deck and any strategy note you choose to add are sent to Anthropic so the analysis can be written. Your name, email address and account ID are never included — the request contains the decklist and nothing that identifies you. Output produced this way is labelled “AI generated” where it appears on the site.
Consent management is provided via Cookiebot, which records and enforces your cookie preferences in line with GDPR requirements.
Advertising
EDHcheck uses Google AdSense to display advertisements. Google AdSense is operated by Google LLC. When you visit pages on this site, Google may use cookies, web beacons, and similar technologies to serve ads based on your prior visits to this website and other websites on the internet.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to EDHcheck and/or other sites on the internet. Google AdSense uses the DoubleClick cookie to serve more relevant advertisements across the web and to limit the number of times a given ad is shown to you.
You can opt out of personalised advertising by visiting Google's Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising by visiting aboutads.info.
Ads are only served after you have granted cookie consent via the Cookiebot banner that appears on your first visit. You can change or withdraw your consent at any time by clicking the cookie icon in the footer.
For more information about how Google collects and uses data from sites that use its advertising services, see How Google uses data when you use our partners' sites or apps.
Data Retention & Deletion
Your data is retained as long as your account exists. You can delete individual decks from your dashboard at any time.
Deleting your account from Account Settings removes your profile, your private decks and builds, and any feedback you have sent us. Decks you chose to publish are not deleted, but your name is removed from them and they appear as belonging to “Deleted user”. They stay online because other people may have saved or linked them, and once your name is gone they no longer identify you. Activity logs are deleted automatically after 90 days.
If you would rather your published decks were removed entirely, or you want a copy of the data we hold about you, email [email protected] or use the contact form and we'll process the request.
If you have a premium subscription, deleting your account cancels it automatically. The cancellation takes effect immediately and you will not be charged again.
Cookies & Local Storage
EDHcheck uses sessionStorage to pass analysis results between pages. Firebase Auth uses local storage to persist your login session. Cookiebot is used to manage cookie consent preferences and Google AdSense may set cookies when consent is granted.
Changes to This Policy
We may update this policy as the product evolves. Significant changes will be noted at the top of this page with a new effective date.