Spellpod is a free, unofficial fan project. Not a commercial service. Here's exactly what we keep and why.
What we collect
- Account & profile: your username, first and last name, birthday, and country.
- Your stuff: decks you save and your table preferences (card sleeve, playmat, and so on).
- Gameplay: the state of any tables or drafts you join, while they're active.
- Password: kept only as a salted
scrypt hash. Never in plain text, and never shown to anyone.
Why we collect it
- To run your account and sync your decks across devices.
- Your birthday is used only to confirm you're 13 or older. It isn't shown to other players.
- To operate live game and draft tables with your playgroup.
What other players see
Only your username and your in-game actions. Your real name, birthday, and country are never shown to other players.
Sharing
We don't sell your data, and we don't share your personal details with advertisers. Card names and images are fetched from a public card database. Your account details and decks live on the operator's own server and aren't sent anywhere else. (If the optional news feature is enabled it queries the Anthropic API for public MTG news only. It never sends your personal data.)
Visitor numbers
We count page views through Cloudflare Web Analytics, so we can see which parts of the site people actually use. It sets no cookies, doesn't fingerprint your device, and doesn't follow you to other sites. It records the page address, the referring site, and rough details like browser and country. It can't identify you, and it isn't tied to your account.
We also count, in aggregate, how often each part of the site is opened and how long it stays on screen. Those are plain totals summed across everyone, with nothing about you attached to them. And we keep our own daily tally of how many separate browsers opened the site, so we can tell one person visiting five times from five people visiting once. To do that without storing anything about you, we turn your address and browser name into a scrambled code using a secret that we throw away and replace every night. Once that happens the code can never be worked out again or matched to the next day's, so all that's left is a number. It sets no cookies, it isn't tied to your account, and we can't turn it back into you.
Ad measurement
When we run ads on Reddit, a small Reddit script on the site counts page visits so we can tell whether the ads work. If you arrive from one of those ads, the ad's click code is kept in a cookie on your browser for 60 days, and if you then create an account we tell Reddit that its ad led to a signup, using only that click code. Nothing else goes with it: no name, no email, no decks, no gameplay. If your ad blocker blocks the script, the site works exactly the same.
Keeping & deleting your data
Your data stays until you ask to remove it. To delete your account and everything tied to it, contact the site operator and it will be erased. You can log out from the lobby at any time.
Ages
You must be 13 or older to create an account. If you're under 13, please don't register.
Changes
If this notice changes, the update will appear here. Questions? Reach out to whoever runs this Spellpod server.