Privacy Policy

1. Data we collect

• Account data — email address, and if you use Google sign-in, the basic profile information Google returns (name, email, avatar). Passwords are handled by our authentication provider; we never see them.
• Deck data — decklists you paste, import or upload, deck titles, saved decks, generated reports and any decks you publish.
• Subscription data — your plan status and billing identifiers from our payment processor. We do not store full card numbers.
• Usage data — pages viewed, analyses run, daily usage counters for free-tier limits, device and browser type, approximate location derived from IP, and error logs.
• Communications — messages you send us for support.

2. How we use it

• To run the analysis engine and return your report.
• To create and secure your account and enforce plan limits.
• To process subscriptions and prevent fraud and abuse.
• To display advertising to free-tier users and measure it.
• To debug, monitor and improve accuracy of scoring and suggestions.
• To send service and account emails, and marketing emails only if you opt in.

Where the GDPR or UK GDPR applies, our legal bases are contract performance (providing the service), legitimate interests (security, improvement, non-personalized advertising), consent (personalized advertising and analytics cookies, marketing email) and legal obligation.

3. AI processing

Your decklist and the computed statistics for it are sent to AI model providers to generate written explanations and rank suggestions. We do not send your email address or payment data to those providers, and we do not authorize them to use your decklists to train their models.

4. Sharing

We share data only with service providers that help us run DeckAnvil, including:

• Cloud hosting, database and authentication providers.
• AI model providers, for report narratives and suggestion ranking.
• Scryfall, for card data lookups (queried by card name, not tied to your identity).
• Payment processors, for subscriptions.
• Advertising and analytics providers, including Google, on the free tier.

We may also disclose data if legally required, to protect our rights, or as part of a merger or acquisition. We do not sell your personal information for money. Some advertising cookie use may count as "sharing" or "sale" under certain US state laws; you can opt out via the controls described in our Cookie Policy.

5. Public content

Decks and reports you publish to the community pages or share by link are visible to anyone with the link, along with the display name you choose. Do not include information you want to keep private. You can unpublish or delete published items at any time.

6. Retention

We keep account and deck data while your account is active. If you delete a deck or report, it is removed from your library and from public listings. When you delete your account, we delete or anonymize your personal data within 30 days, except records we must keep for tax, accounting or fraud-prevention purposes. Backups and logs may persist for a short additional period.

7. Security

Data is encrypted in transit, access to production data is restricted, and database row-level security limits your records to your account. No system is perfectly secure; please use a strong, unique password.

8. International transfers

We are based in the United States and our providers may process data in the US and other countries. Where required, transfers rely on Standard Contractual Clauses or other approved safeguards.

9. Your rights

Depending on where you live, you may request access, correction, deletion, a portable copy, restriction of processing, or to object to processing; withdraw consent; and opt out of targeted advertising. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. Email legal@deckanvil.app and we will respond within the time the law allows. We may need to verify your identity via your account email. An authorized agent may submit a request with written proof of authority.

10. Children

DeckAnvil is not intended for children under 13 (under 16 in the EEA/UK). We do not knowingly collect their data; if you believe a child has given us data, contact us and we will delete it.

11. Changes and contact

We will update this policy as the service changes and revise the "last updated" date. Contact Average Build LLC at legal@deckanvil.app with any privacy question.