Privacy Policy
MTGStack is a Magic: The Gathering collection and deckbuilding app published by Wrightserve. This policy explains what we collect, why, and what you can do about it. It covers the MTGStack mobile app and this website.
The short version: we store your collection and decks so they survive losing your phone, we do not sell your data, and there is no advertising, analytics or tracking in the app at all.
Who is responsible for your data
Wrightserve is the data controller. For anything in this policy, including requests about your own data, contact support@mtgstackdeckbuilder.com.
You need an account
MTGStack cannot be used without signing in, because your collection and decks are stored in your account rather than only on your phone. There are two ways to sign in:
- A one-time link or code sent to your email. We store your email address.
- Continue with Google. Google gives us your email address, your name and your profile picture. Nothing else, and never your password.
What we store in your account
- Your card collection: which cards you own, quantities, finish and condition.
- Your decks, and your purchase list.
- Results of games you choose to record in the Tracker.
- Your display name, profile picture and currency preference.
- Your subscription status, if you subscribe.
- Any feedback you send us from inside the app (see below).
What stays on your device
Some things are never uploaded:
- Reference photos you attach to cards. These stay in the app's private storage on your phone. Only the file path is recorded, and that means nothing anywhere else. Uninstalling the app deletes them.
- Card scans. Text recognition runs entirely on your device. No image from your camera is uploaded, transmitted or retained.
- The card database cache and the diagnostic log. Local only. The log is visible to you under Settings → Diagnostics and is never sent anywhere automatically.
Camera
The app asks for camera access for two things: scanning a card to add it to your collection, and taking a reference photo. It is used for nothing else, and you can decline. The rest of the app works without it.
Feedback you send us
If you use the feedback button, we receive what you wrote plus your app version, platform and device model, so that a bug report is actually actionable. It is linked to your account because we may need to reply. It is not used for anything else.
Emails you send us
Email to support@mtgstackdeckbuilder.com is received by Cloudflare's email routing and delivered to an inbox hosted by Google. We keep it for as long as we need to deal with your message, and use it for nothing else.
Payments
Premium is an optional monthly subscription. Payments are processed by Stripe, who handle your card details directly. We never see or store them. We keep only a record of whether your subscription is active and the identifier Stripe uses for your billing account.
Stripe retains transaction records independently of us, and must do so to meet financial and tax obligations. Deleting your MTGStack account does not erase those records.
Who else is involved
- Supabase hosts our database and handles sign-in on our behalf. Data is held in the United Kingdom.
- Stripe handles payments, as above.
- Cloudflare hosts this website and our billing service, and routes email sent to us.
- Expo delivers app updates. It receives technical information about the app build and device, not your account contents.
- Scryfall, EDHREC and Frankfurter are public sources for card data, deck suggestions and exchange rates. Requests to them contain card names and search terms only. They receive nothing that identifies you.
Some of these operate outside the UK, so your data may be transferred internationally. Where it is, we rely on the providers' standard data protection terms.
This website
This website sets no cookies and runs no analytics or tracking scripts. Like any website, its host (Cloudflare) processes your IP address and basic request details in order to deliver pages and protect the site from abuse. Fonts are loaded from Google Fonts, which receives your IP address when it serves them.
Affiliate links
The Buy List can link out to TCGplayer. Those are affiliate links: if you buy something after following one, we may earn a commission, at no extra cost to you. Which cards MTGStack suggests is decided before any of that and is not influenced by it.
Following a link opens TCGplayer in your browser, and from that point you are on their site under their privacy policy. The affiliate network that pays the commission can see that a click came from this app. MTGStack sends them nothing that identifies you, and nothing at all happens unless you tap the link.
What we do not do
- We do not sell or rent your data, to anyone, ever.
- There are no advertising, analytics or tracking libraries in the app. Not a reduced set: none.
- We do not build advertising profiles or share data for advertising.
- We do not track you across other apps or websites.
Why we are allowed to hold it
Under UK GDPR, our lawful bases are: performance of a contract for the account data the app needs to work at all; legitimate interests for diagnostics, feedback, support email and keeping the service secure; and legal obligation for payment records.
How long we keep it
For as long as your account exists. Delete your account and it goes, other than the payment records Stripe is required to keep. Copies may persist briefly in routine database backups before those are rotated out.
Deleting your account
In the app, go to Settings → Account → Delete account. That removes your account and its contents from our servers and clears the local copy. It cannot be undone.
If you have already uninstalled the app, see Delete your account for how to ask us to do it.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Email support@mtgstackdeckbuilder.com and we will respond within one month.
If you are unhappy with how we have handled a request, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Children
MTGStack is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.
Changes
If this policy changes in a way that affects you, we will update the date at the top and, where the change is significant, say so in the app.
Not affiliated with Wizards of the Coast
MTGStack is unofficial Fan Content permitted under the Fan Content Policy. Not approved/endorsed by Wizards. Portions of the materials used are property of Wizards of the Coast. ©Wizards of the Coast LLC.