Privacy policy

This policy explains what Mana Forge collects and why. The site is run by Andrew Young, Kopernikusstrasse 7, 0.23, 69115 Heidelberg, who is responsible for your data (the “controller”). Contact: contact@manaforgehub.com.

What we store and why

• Account: your email, an optional display name and a scrambled (hashed) version of your password. Needed to run your account (contract).
• Decks, favourites and price watchlist: what you save on the site. Needed to provide those features (contract). Public decks show your display name only, never your email.
• Orders: your email, what you bought, the amount, and for proxy orders your shipping name and address. Needed to deliver the order (contract) and kept for tax and accounting (legal obligation).
• Security logs: your IP address is used briefly in memory to limit login attempts and abuse, and errors are logged without personal details. Legitimate interest in keeping the site safe.
• Reports: if you report a deck, we store the reason you give and the deck it's about.

Cookies and browser storage

We only use what the site needs to work: a sign-in cookie (secure, HttpOnly, lasts up to 14 days) and your browser's own storage for your cart, proxy project, intro animation and your seat in a play room. There are no advertising or tracking cookies and no analytics, so there's no cookie banner.

Who else sees data

• Stripe processes payments. Card details go straight to Stripe and never touch our server.
• Scryfall serves card images, so your browser connects to their servers when you view cards.
• Our hosting provider runs the server and stores the database.
• Print and shipping partners receive your shipping address for proxy orders.

We don't sell your data. Some of these providers may process data outside your country under standard legal safeguards.

How long we keep it

• Account, decks and favourites: until you delete your account.
• Orders: as long as tax law requires (usually up to 10 years), then deleted.
• Play rooms: deleted after a few hours of inactivity.
• Backups: kept for 14 days.

Your rights

You can ask to see, correct, export or delete your data, or object to how it's used, by emailing contact@manaforgehub.com. We reply within one month. You can also complain to your local data protection authority.

Children

The site isn't meant for children under 16 and we don't knowingly collect their data.

Changes

If this policy changes, the date at the top changes too. Big changes will be announced on the site.