Privacy Policy

Last updated: 2025-11-16

No tracking: no analytics pixels, no advertising cookies, no accounts.

What we process

Server access logs — IP, user-agent, request URL, status code, timestamp. Kept for security and abuse prevention, automatically deleted after a short retention (≈14–30 days).
Decklists you paste — parsed in your browser; card lookup hits the API but we don’t persist decklists.

No analytics, no advertising cookies. If we ever need a strictly-necessary cookie (e.g., CSRF/session integrity), we’ll document it here.

Processing of access logs relies on legitimate interests (Art. 6(1)(f) GDPR): security, anti-abuse, and service integrity.

We don’t sell personal data. Our hosting provider may process logs to operate the service.

Hosting/logs may be in the EU or other jurisdictions, depending on infrastructure choices.

Access, rectification, erasure, restriction, objection (as applicable under GDPR).
To exercise your rights, email: DonGrzechuj24@gmail.com.

If we materially change this policy, we’ll update the “Last updated” date and summarize changes.