Privacy

What is collected

Only what an account needs to work:

• Your email address, so you can sign in and recover the account. If you sign in with Discord or Google, they give us your email address and nothing else you have not already agreed to share with them.
• A username, and optionally a display name, avatar, short bio, and your region — whatever you choose to put on your profile.
• The decks you build, including whether each one is private, unlisted, or public.
• Tournament results that you submit, or that a store organiser records and you later claim as yours.

There is no analytics, no advertising, and no tracking of any kind. Nothing on this site follows you to another one.

Cookies

Only the ones that make signing in work: a session cookie, and two short-lived cookies during a Discord sign-in that remember which sign-in attempt is yours and where to send you afterwards. There are no advertising or analytics cookies, which is why this site does not ask you to accept any.

What becomes public, and when

This is the part worth reading twice, because it is the one thing here that you cannot undo.

• A deck is private by default. Private decks are visible only to you, enforced by the database itself and not merely by the pages that display them.
• Placing at a tournament publishes the decklist you played. When an organiser confirms your placement, the frozen copy of that deck becomes readable by anyone. That is the point of the site — the archive of what actually won is what the meta pages are built from — and the submission form says so before you confirm. Your working deck stays private and can keep changing; the published copy cannot be edited afterwards.
• Your profile, its public decks, and your tournament record are visible to anyone. Your email address is not, and is never shown to other users.

Who else handles it

Three companies, each doing one job, and none of them given the data for their own purposes:

• Supabase stores the database, the accounts, and the card images.
• Vercel hosts and serves the site.
• Discord and Google, only if you choose to sign in with them, and only to confirm who you are.

These providers operate in the United States, so if you are reading from elsewhere your data is stored there. Nothing is ever sold, and nothing is shared with anyone else except where the law leaves no choice.

Removing it

You can delete your account at any time from account settings. That removes your account, your profile, and your decks.

One exception, stated plainly: a decklist already published through a tournament placement stays in the archive, with the player name it was recorded under. Withdrawing a result after the fact would let anyone edit the record of an event that other people played in, and the archive is only worth anything if it cannot be rewritten. If you need a published result removed, write to us and say why — we would rather hear the case than pretend there is never one.

You can also ask for a copy of what is held about you, or ask for a correction, by writing to REPLACE-ME@example.com.

Children

This site is not intended for children under 13, and accounts are not knowingly created for them. If you believe a child under 13 has an account here, write to REPLACE-ME@example.com and it will be removed.

Changes

If this policy changes in a way that affects what is collected or who sees it, the date at the top changes with it.