Privacy Policy

• You can browse cards, build a team and share it without an account.
• There are no analytics, no advertising and no tracking scripts on this site. No third-party tag of any kind is loaded.
• We do not sell or share your data, and we send no marketing email.
• Pairings you share are public to anyone with the link.

If you never sign in: we store the team pairing you choose to save — its name, deck names, commanders, card names and quantities, and the time it was created or changed. It is not linked to you. Your browser holds a secret edit token that lets you change it later.

If you sign in with Google: we receive and store your name, email address, profile picture URL and a Google account identifier. We ask Google only for email, profile and openid — never your Gmail, contacts, Drive or anything else. Pairings you save while signed in are linked to your account.

In your browser: the deck builder keeps your in-progress decks, a cache of card data and a reference to your share link in localStorage. That stays on your device and is never sent to us except when you press share.

Server logs: our host records standard request logs including IP address, user agent and requested path. We do not use them to build a profile of you.

We set cookies only to keep you signed in. There is a short-lived cookie during the Google sign-in handshake, and a session cookie afterwards. Both are strictly necessary — without them login cannot work.

There are no advertising, analytics or profiling cookies. If you never sign in, we set no cookies at all.

• Neon (a Databricks company) hosts our database and authentication. Your account and pairings live in a Postgres database in Frankfurt, Germany (EU).
• Vercel hosts and serves the site, and processes request logs.
• Google — only if you choose to sign in with Google. Google tells us who you are; we tell Google nothing about you.
• Scryfall provides card data and images. Card images load directly from Scryfall in your browser, so your IP address is visible to Scryfall whenever you view a page showing card art. This is true whether or not you have an account.
• Card marketplaces — TCGplayer, Card Kingdom and Cardmarket. We never send them your data. Buy links are affiliate links carrying only a partner code, and we may earn a commission if you purchase. Once you follow one, that marketplace's own privacy policy applies.

A saved pairing gets an unlisted address like /t/abc123. The address is hard to guess, but it is not private: anyone you send it to can open it, it can be forwarded, and it is built to be indexed by search engines so that pairings are discoverable. Do not put anything in a deck or team name that you would not want published.

Pairings are kept until they are deleted. Account data is kept while your account exists. Ask us to delete either and we will.

Under the GDPR you may request a copy of your data, have it corrected or erased, object to how it is used, or ask for it in a portable format. Email info@ricardobroeders.nl and we will act on it.

If you are unhappy with how we handle a request, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

This site is not directed at children under 16. If you believe a child has given us personal data, contact us and we will remove it.

If this policy changes materially we will update the date at the top. Questions go to info@ricardobroeders.nl.

See also our Terms of Service.