Privacy Policy
Last updated: March 25, 2026
MTG Copilot ("we", "us", or "our") operates the MTG Copilot web application (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
When you create an account, we collect your email address and, if you sign in with Google, your name and profile picture as provided by Google. This information is used to authenticate you and personalize your experience.
Deck and Collection Data
We store the decks you create, your card collection, and related metadata (deck names, card quantities, notes). This data is necessary to provide core Service functionality.
AI Conversation Data
When you use the AI deck-building assistant, we store your conversation history (messages you send and AI responses) to maintain context across sessions and improve the quality of suggestions. Conversations are tied to your account and are not shared with other users.
Usage and Log Data
We automatically collect standard log information when you access the Service, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data helps us monitor and improve the Service.
Third-Party Services
We use the following third-party services that may receive or process your data:
- Supabase — authentication, database hosting, and file storage
- Vercel — application hosting and analytics
- Anthropic (Claude) — AI-powered deck-building assistance. Your messages to the AI assistant are sent to Anthropic for processing. Anthropic's privacy policy governs their handling of this data.
- Voyage AI — card search and semantic similarity. Card data (not personal data) is processed for embedding generation.
These providers access only the information necessary to perform their functions and are obligated not to use it for other purposes.
How We Use Your Information
- To provide and maintain the Service
- To authenticate your identity and manage your account
- To store and sync your decks and collections
- To power AI-assisted deck building and card recommendations
- To monitor usage patterns and improve the Service
- To communicate with you about Service-related matters
Data Security
We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, row-level security policies on our database, and secure authentication flows. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your account data, decks, and conversation history for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
Cookies
We use essential cookies to maintain your authentication session. We do not use advertising or tracking cookies.
Children's Privacy
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data, we will delete it promptly.
External Links
The Service may contain links to third-party websites (e.g., card retailers, Scryfall). We are not responsible for the privacy practices of these external sites and encourage you to review their policies.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy, please contact us at support@mtgcopilot.com.