Privacy Policy

Information We Collect

• Account identity and email: Provided through our authentication provider (Auth0) upon login.
• Decks, collections, deck history, preferences, and match history: Stored when you create, edit, or play games in Deck Assemble.
• Feedback submissions and server logs: Diagnostic data, bug reports, and standard IP logs for site security.

Third-Party Service Providers

• Auth0 (Okta): Handles user identity, sign-in, and session management.
• Railway: Hosts our application backend APIs and PostgreSQL database.
• Vercel: Hosts our web application frontend and edge assets.
• Anthropic: Powers AI beginner guide generation. Only card text is processed; no personal user data is sent.
• Scryfall, Commander Spellbook, MTGJSON, and EDHREC: External card catalogs fetched server-side; no user data is sent.

Cookies

Deck Assemble uses only strictly necessary session cookies issued by Auth0 to maintain your authenticated session.

We do not use advertising trackers, marketing pixels, or third-party advertising or analytics cookies.

Retention and Account Deletion

You can delete your account and all associated decks, collections, and history at any time by navigating to Settings → Delete account.

Upon deletion, your active records are immediately deleted. Automated database backups retain data for up to 30 days before being completely purged.

Your Rights and Contact

Depending on your jurisdiction (including California CCPA/CPRA and European GDPR), you have the right to access, correct, or delete your personal data.

We do not sell your personal data. To exercise your rights or ask questions, contact us at privacy@deckassemble.com.

Children's Privacy

Deck Assemble is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.