Privacy Policy
Last updated: 16 August 2026
1.Account data
Name, email and avatar provided at sign-up or through Google Sign-In.
2.Google Sign-In
We receive basic profile information from Google when you choose that method.
3.Cookies
Essential cookies for session management; analytics cookies only with consent.
4.Analytics and logs
Product events and technical logs used to operate and improve the service.
5.Companion data
Matches, decklists, deck versions and device identifiers, collected only after explicit consent and pausable at any time.
6.Decklists and matches
Used for your personal analytics and, in anonymised aggregated form, for public statistics.
7.Devices and IP address
Collected for security, abuse prevention and session management.
8.Payments
Payment data is processed by Stripe for purchases made in Brazil, and by Paddle.com Market Ltd outside Brazil. Paddle acts as merchant of record and processes payment and billing data as an independent controller under its own privacy notice. We never store complete card numbers.
9.Processing and storage
Data is processed on managed cloud infrastructure with access controls and encryption in transit.
10.Purpose of processing
Operating the service, producing statistics, generating AI analyses, billing and security.
11.Retention
Account data is kept while the account exists and deleted within 30 days of account deletion. Match and deck history is kept while the account exists or until you delete it from Data & Privacy settings. Billing records are kept for the period required by tax and accounting law. Anonymised aggregate statistics contain no personal data and may be kept indefinitely.
12.Sharing with processors
Limited to infrastructure, payment and analytics processors under contract.
13.Individual data of other players
Never exposed. Public data is aggregated and anonymised.
14.Deletion and export
Data & Privacy settings allow exporting your data, deleting Companion data and deleting your account.
15.Consent
Analytics, Companion collection and marketing communication each have separate, revocable consent.
16.LGPD rights
Access, correction, portability, anonymisation, deletion and information about sharing. GDPR alignment planned.
17.Controller contact
Requests about your data can be sent to privacy@openmagic.gg and are answered within the statutory deadlines. For anything else, write to support@openmagic.gg.