Privacy Policy

Who we are

ManaForge is an independent deck-building tool for Magic: The Gathering, focused on the Commander format. We are not affiliated with, endorsed, or sponsored by Wizards of the Coast.

Information we collect

• Account information. When you sign in with Google, we receive your name, email address, and profile picture. If you register with an email and password, we store your email and a securely hashed password (we never store your password in plain text).
• Content you create. Decks, card lists, collections, and any feedback you submit are saved to your account.
• Session & security data (essential). While you are signed in we record your session start and end times, session duration, and an approximate country derived from your IP address. We do not store your raw IP address. This is used to keep your account secure (e.g. detecting unusual activity) and to understand overall engagement; it relies on our legitimate interest in operating a secure service.
• Analytics data (only with your consent). If you choose Accept all in the cookie banner, we also record coarse analytics tied to your sessions: approximate region and timezone, device and browser type (from your user-agent), language, and the referring site. We never collect street-level location or your precise coordinates. You can decline this with Essential only, and the analytics-only signals are simply not collected.
• Cookies. We use a small number of essential cookies to keep you signed in (your session expires automatically 7 days after sign-in) and to remember your cookie choice. Analytics-tier tracking only happens after you select Accept all. You can change your choice at any time, and we also use Vercel's privacy-friendly, cookieless analytics.

How we use your information

• To create your account and keep you signed in.
• To save, display, and sync your decks, collections, and preferences.
• To operate, maintain, secure, and improve ManaForge.
• To understand usage trends and respond to the feedback you send us.

Third-party services

ManaForge relies on a few trusted providers, each governed by their own privacy policies:

• Google — sign-in (OAuth) authentication.
• Scryfall — Magic: The Gathering card data, images, and prices.
• Commander Spellbook — combo data.
• Vercel — hosting and privacy-friendly analytics.

How your information is shared

We do not sell your personal information. The only content visible to other users is what you choose to make public: a deck marked Public can be viewed by anyone with its link and may appear in community areas like the Tavern. Decks marked Private remain visible only to you.

Data retention

We keep your account and content for as long as your account is active. Session and analytics logs are kept for a limited period (currently 180 days) and then automatically deleted. You can delete individual decks at any time, or request deletion of your account and all associated data — including your session history — by contacting us; deleting your account removes these records.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To make a request, reach out through our Feedback page and we'll do our best to help.

Children's privacy

ManaForge is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the “Last updated” date above. Significant changes may also be highlighted in the app.

Contact

Questions about this policy? Get in touch via our Contact page or send a note through Feedback.