Last updated: June 1, 2026
Decktrove is a Magic: The Gathering collection tracking service. For privacy matters, contact us at [email protected]. We are the data controller for information collected through this service.
| Data | Why | Legal basis |
|---|---|---|
| Email address | Account creation, transactional emails | Contract |
| Username | Identify you within the service | Contract |
| Password (hashed, never stored in plain text) | Authenticate your account | Contract |
| Collection, decks, wishlist | Core service functionality | Contract |
| Scan photos (if enabled in Settings) | Show you what was scanned; improve recognition | Consent |
| Card recognition logs (card name, confidence score, timestamp) | Improve recognition quality | Legitimate interest |
| Session cookie | Keep you logged in | Strictly necessary |
| Analytics data (pages visited, session duration, approximate location, device type) | Understand how the service is used and improve it — via Google Analytics 4 | Legitimate interest |
We do not collect payment information or precise location data.
You may optionally make your collection or individual decks publicly accessible via a shareable link. When you do, your username and the shared card data (card names, quantities, set codes, and prices) become publicly visible to anyone with the link, without requiring authentication. Sharing is off by default and can be revoked at any time from within the app.
If you enable scan photo saving in Settings, photos of your cards are stored on our servers. Anonymized image crops — containing card art only, no personal information — may be used to improve Decktrove's card recognition. You can disable this at any time in Settings. Disabling it stops future photos from being saved; existing photos are deleted when you remove the associated card or delete your account.
We will only send you marketing or product update emails if you explicitly opt in. You can unsubscribe at any time via the link in any email or by contacting [email protected].
We keep your data for as long as your account exists. When you delete your account, all associated data — collection, decks, wishlist, scans, and scan photos — is permanently deleted immediately. We do not retain backups of deleted accounts beyond our 7-day rolling backup window, after which your data is gone from our systems entirely.
We do not sell your data. We use the following processors, each under a Data Processing Agreement:
Backblaze and Resend are based in the United States. Transfers are covered by Standard Contractual Clauses where required under GDPR.
Under GDPR you have the right to:
To exercise any right, or if you have a complaint, contact [email protected]. If you are in the EU and we cannot resolve your concern, you have the right to lodge a complaint with your local supervisory authority.
We use the following cookies:
_ga, _ga_*) — analytics cookies set by Google Analytics 4. These help us understand aggregate usage patterns. They do not identify you personally. You can opt out via Google's opt-out tool or your browser's privacy settings.Decktrove is not directed at children under 13. We do not knowingly collect data from children.
We may update this policy. Material changes will be communicated by email. Continued use after changes constitutes acceptance.