Last updated: September 4, 2026
Decktrove is a Magic: The Gathering collection tracking service. For privacy matters, contact us at [email protected]. We are the data controller for information collected through this service.
| Data | Why | Legal basis |
|---|---|---|
| Email address | Account creation, transactional emails | Contract |
| Username | Identify you within the service | Contract |
| Password (hashed, never stored in plain text) | Authenticate your account | Contract |
| Google account id, email, and name (only if you use Sign in with Google) | Create and sign in to your account; the name seeds your username | Contract |
| Collection, decks, wishlist | Core service functionality | Contract |
| Scan photos (if enabled in Settings) | Show you what was scanned | Consent |
| Card recognition logs (card identified, confidence score, text read from the card's corner and name line, processing times, timestamp; kept 180 days) | Measure and improve recognition quality | Legitimate interest |
| Scan fingerprints (a numeric representation of a scan you confirmed or corrected — no image — with the card's identity and your account) | Improve recognition for all users | Legitimate interest |
| Session cookie | Keep you logged in | Strictly necessary |
| Analytics data (pages visited, session duration, approximate location, device type) | Understand how the service is used and improve it — via Google Analytics 4 | Legitimate interest |
We do not collect payment information or precise location data.
You may optionally make your collection or individual decks publicly accessible via a shareable link. When you do, your username and the shared card data (card names, quantities, set codes, and prices) become publicly visible to anyone with the link, without requiring authentication. Sharing is off by default and can be revoked at any time from within the app.
Every scan sends a photo of the card to our servers to identify it. If scan photo saving is enabled in Settings (on by default), that photo is kept so you can see what was scanned; we keep at most 3,000 per account, removing the oldest first. Disabling it stops future photos from being saved; existing photos are deleted when you remove the associated card or delete your account. You can also choose a photo from your device instead of using the camera — it is handled the same way.
When you confirm or correct a scan, we may keep a numeric fingerprint of the image — not the photo — together with the card's identity and your account, and use it to improve recognition for all users. Fingerprints contain no image and no personal information, and cannot be turned back into a photo.
The deck generator and combo checker send card names (never your account details) to EDHREC and Commander Spellbook to fetch recommendations.
We will only send you marketing or product update emails if you explicitly opt in. You can unsubscribe at any time via the link in any email or by contacting [email protected].
We keep your data for as long as your account exists, with two exceptions: card recognition logs are deleted after 180 days, and scan fingerprints — which contain no personal information — may be retained after you delete your account. When you delete your account, all other associated data — collection, decks, wishlist, scans, and scan photos — is permanently deleted immediately. We do not retain backups of deleted accounts beyond our 7-day rolling backup window, after which your data is gone from our systems entirely.
We do not sell your data. We use the following processors, each under a Data Processing Agreement:
Decktrove shows affiliate links to Amazon and TCGplayer. Clicking one takes you to their site, where their own privacy policies apply; we do not send them your Decktrove data. We may also show ads through Google AdSense; if we do, Google may set advertising cookies (see Cookies below).
Backblaze, Resend, and Google are based in the United States. Transfers are covered by Standard Contractual Clauses where required under GDPR.
Under GDPR you have the right to:
To exercise any right, or if you have a complaint, contact [email protected]. If you are in the EU and we cannot resolve your concern, you have the right to lodge a complaint with your local supervisory authority.
We use the following cookies:
_ga, _ga_*) — analytics cookies set by Google Analytics 4. These help us understand aggregate usage patterns. They do not identify you personally. You can opt out via Google's opt-out tool or your browser's privacy settings.The app also uses your browser's local storage — not cookies — for things that never leave your device: display preferences (view mode, card size, last tab), the auto-capture setting, scans you haven't saved yet, an offline copy of your collection so the app works without a connection, and which accessory suggestions you've clicked or dismissed (used only to pick which suggestions to show you). None of this is sent to us.
Decktrove is not directed at children under 13. We do not knowingly collect data from children.
We may update this policy. Material changes will be communicated by email. Continued use after changes constitutes acceptance.