Privacy Policy

Account information: the email, username, and password (stored hashed, never in plain text) you register with, or the profile info Google/Discord shares with us if you sign in that way.

Content you create: the decks, decklists, and collection entries you build or import.

AI feature usage: when you use AI deck building, suggestions, or play a beta game, we log which provider and model you used and how much, so we can enforce plan limits — we don't use your data to train any model.

Billing: your Stripe customer ID and subscription status. We never receive or store your card number — Stripe collects payment details directly.

We don't sell your data, and we don't share it with advertisers.

If you save an API key for an AI provider, it's encrypted at rest. Once saved, we never display it again — not even to you — and we never share it with anyone. Settings → API keys shows only its last 4 characters, to confirm which key is stored.

Stripe, to process payments and subscriptions.

The AI provider you choose (OpenAI, Anthropic, xAI, or OpenRouter, or mtgmatic's own managed keys on the Premium plan), to run AI deck building, suggestions, and the beta playtest opponent. Only the prompt needed for that feature is sent — never your account credentials or your stored keys for other providers.

Google or Discord, only if you choose to sign in with one of them, to confirm your identity.

Our hosting provider, to run the application and store the data above.

We don't use any other third party, and we don't run ad trackers or sell access to any of this data.

Card names, oracle text, prices, and images shown throughout mtgmatic are sourced from Scryfall (scryfall.com) via its public API — mtgmatic doesn't independently collect or store card scans.

If GDPR or an equivalent law applies to you, you can ask us to: give you a copy of the personal data we hold about you, correct anything inaccurate, delete your account and associated data, or export your decks and collection in a portable format.

Email support@mtgmatic.app to exercise any of these. We'll respond within 30 days. Deleting your account removes your decks, collection, and stored keys; it doesn't automatically cancel an active Stripe subscription — cancel that first from Settings → Billing, or ask us to do it for you.

mtgmatic sets one cookie: a session cookie that keeps you logged in. We don't use tracking or advertising cookies, and we don't run any third-party analytics scripts.

Questions about this policy, or want to exercise a right above? Email support@mtgmatic.app.