Privacy Policy
Last updated: 2026-07-21.
This page explains what personal data DeckScout (the "Service") processes, why, and what rights you have, under the EU General Data Protection Regulation (GDPR) and the Italian data protection code.
Data controller
The data controller is the operator of mtgdeckscout.uk, a natural person based in Italy. The dedicated channel for any privacy matter, including requests to exercise your rights under Articles 15–22 GDPR, is [email protected]. Full identification details of the controller are kept on file and are provided without delay to any data subject exercising those rights, and to the competent supervisory authority upon request.
What we collect, and why
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Email address, name (from your verified profile) | Sign-in with Google, Microsoft or Discord (whichever you use) | Identify your account, keep your workspace separate from other users | Performance of the service you requested |
| IP address | Every request, from connection/proxy headers | Security logs, enforcing the anonymous fair-use scan limit before sign-in | Legitimate interest (abuse prevention, cost control) |
| Your uploaded card collection and saved search settings | File you upload / options you set | Run the deck-discovery feature you asked for, restore it on your next visit | Performance of the service you requested |
| Recent scan history (format, colors, threshold, result summary; not the full deck lists or your collection contents) | Each search you run while signed in, most recent 20 entries | Show your own history on your profile page. Also reviewed by the site operator, but only in aggregate, anonymized form (counts of formats, colors, thresholds and sources across every user, never a per-account breakdown) to understand overall usage and improve the Service | Performance of the service (your own history) and legitimate interest (aggregate service improvement) |
| Email used on Ko-fi | Ko-fi, only if you choose to support the project | Recognize your account as a supporter and grant the bonus scan allowance | Performance of the service you requested (your own action) |
DeckScout never asks for a password: sign-in is entirely delegated to whichever provider you choose (Google, Microsoft or Discord). We never see or store that provider's password.
What we never collect
Card names sent to the public deck sources (EDHREC, Archidekt, MTGGoldfish, Moxfield, Scryfall) to look up decks, prices and legality carry no personal data: those services never see your email, IP or account. Your uploaded collection is never sold, shared with advertisers, or used to train any model. The aggregate usage stats described above are counts only: the admin view never lists which account ran which search.
Who data is shared with
- Google, Microsoft or Discord: whichever you use to sign in authenticates you (OAuth). See Google's, Microsoft's or Discord's privacy policy.
- Ko-fi: processes support contributions and tells us, via a webhook, which email supported the project. See Ko-fi's privacy policy.
- Cloudflare: network routing and TLS termination for this domain.
- DigitalOcean: hosts the server the Service runs on.
These providers and Ko-fi are based outside the EU; all rely on standard contractual clauses or an adequacy framework for the transfer.
How long we keep it
Your account workspace (collection, settings) is kept as long as your account exists and is deleted on request. Access logs and the anonymous per-IP scan counter are kept in memory only and reset when the server restarts. The anonymous browser cookie itself expires after 30 days.
Your rights
Under the GDPR you can ask us, at any time and free of charge, to access, correct, delete or export your data, or to object to a specific processing. Write to [email protected] and we will act within one month. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
Cookies
The Service uses a small number of strictly technical cookies, described in the Cookie Policy.
Changes
If this policy changes materially, the "last updated" date above will change accordingly.