← Back to Home

Privacy Policy

Last updated: June 16, 2026

1. Introduction

EDH Playgroup ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, Discord bot, and related services (collectively, the "Service").

2. Information We Collect

2.1 Authentication Information

When you sign in with Discord, we receive information from Discord's OAuth service. We store:

  • Discord user ID
  • Display name (derived from your Discord username)

We request the email OAuth scope from Discord, but we do not store your email address in our database. We do not store your Discord avatar or profile images.

2.2 Game and Usage Data

We collect information you provide while using the Service, including:

  • Game results, eliminations, and statistics
  • Deck names, lists, and import metadata (e.g. from Moxfield or Archidekt)
  • Achievement progress and awards
  • Playgroup memberships and admin roles
  • Event registrations and tournament results
  • Post-game deck feedback and turn objective ratings

2.3 Automatically Collected Information

Our hosting providers may automatically collect standard technical information when you access the Service, such as IP address, browser type, request timestamps, and error logs. We use this information to operate, secure, and troubleshoot the Service.

2.4 Website Analytics

We use privacy-oriented analytics on our public website to understand aggregate traffic and how visitors use our marketing pages. Depending on configuration, this may include:

  • Cloudflare Web Analytics — page views, referrers, and device/browser summaries. Does not use cookies for tracking. See Cloudflare’s privacy documentation for how they process request data.
  • Google Analytics 4 (optional) — if enabled, we may track page paths and anonymous interaction events (such as which buttons were clicked) to improve the site. GA4 may use cookies in some configurations.

We do not use analytics to identify individual users or to sell your data. Analytics does not track activity inside authenticated dashboard features beyond standard page paths when GA4 is enabled. We do not use advertising or remarketing pixels.

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain the Service
  • Authenticate users and associate activity with the correct account
  • Track game statistics and display analytics within your playgroups
  • Enable playgroup, season, and event features
  • Improve reliability and fix bugs
  • Comply with legal obligations

4. Data Sharing and Disclosure

4.1 Within Playgroups

Game statistics, deck information, and other gameplay data are visible to members of playgroups you belong to. This sharing is essential to how the Service works.

If you create a Season Wrapped share link, anyone with that unlisted URL can view your personal season summary (stats, awards, and rivalries for that season). Share links are optional and only generated when you request them or when we send you a season-end notification. You can request account deletion to remove your data and invalidate share tokens.

4.2 Service Providers

We use third-party providers to operate the Service, including Discord (authentication), Railway (application hosting and database), and Cloudflare (frontend hosting and CDN). These providers process data on our behalf to deliver the Service.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests from public authorities.

4.4 Business Transfers

If the Service is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We use reasonable technical measures to protect your data, including HTTPS/TLS encryption for data in transit, Discord OAuth 2.0 for authentication, and access controls on our infrastructure. Our database is hosted on a managed PostgreSQL service.

No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Service. You can delete your personal data at any time from the Account page while signed in.

When you delete your data, we anonymize your player profile and remove personal information such as achievements, playgroup memberships, and deck details. Historical game records may be retained in anonymized form so playgroup statistics remain accurate.

7. Your Rights

Depending on where you live, you may have rights regarding your personal data, including:

  • Access — request a copy of your personal data
  • Correction — update inaccurate data (e.g. via Discord display name on next login)
  • Deletion — remove your personal data via the Account page
  • Portability — request your data in a portable format
  • Objection or restriction — object to certain processing activities

To delete your data, sign in and visit the Account page. For other requests, contact us through the Discord server associated with your playgroup.

8. Browser Storage

The web dashboard stores authentication tokens in your browser's local storage to keep you signed in. We do not use third-party advertising or analytics cookies. Cloudflare, our frontend host, may set cookies necessary for security and content delivery.

If you clear local storage or use private browsing, you will need to sign in again.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Third-Party Links

The Service may link to third-party websites such as Archidekt, Moxfield, or other deck building platforms. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

11. International Data Transfers

Your information may be processed in countries other than your own, including the United States where our hosting providers operate. By using the Service, you consent to this transfer.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post changes on this page and update the "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us via:

  • The Account page (for data deletion while signed in)
  • The Discord server associated with your playgroup

GDPR Notice

If you are in the European Economic Area (EEA), you have data protection rights under the General Data Protection Regulation (GDPR), including the rights described in Section 7. To exercise them, use the Account page or contact us through your playgroup's Discord server.