Privacy Policy

When you sign in, Mana Foil stores the account details needed to run your account, including your Google account identifier, email, avatar, and the public handle you choose.

If you use deck, collection, or import features, we store the cards, quantities, categories, sideboard entries, selected printings, deck names, visibility settings, and related metadata needed to show and save that work.

We also keep basic technical records such as session cookies, request timestamps, and rate-limit data to protect the service and troubleshoot failures.

We use account data to authenticate you, keep your saved decks and collection private by default, and display your chosen public handle when you publish content.

We use deck and collection data to power Mana Foil features such as validation, prices, exports, collection-aware recommendations, and saved deck editing.

Imported and saved decklists may be folded into anonymized, deduplicated aggregate card statistics. Those aggregates are used for recommendation quality and are not linked to your email, Google identity, or public handle.

When you start a card scan, your browser asks for permission to use your camera. While the scan is open, the scanner captures frames itself. We do not receive a background camera feed. You can upload a photo from your device instead of using the camera. In that case, we receive the image you choose.

Each frame or uploaded image goes to our server over HTTPS. We process it in memory into a visual fingerprint, match it against card data, and discard the image when the request completes. Before anything is sent, your browser crops the image to the card and re-encodes it, so the copy we receive carries none of the photo's location, device, or timestamp details.

Scan photos and uploaded images are never saved to our database, file storage, logs, caches, or error reports.

When you confirm a match, we save the card name, printing, finish, condition, and quantity to your collection like any other collection entry. We do not save the photo.

Magic card names, rules text, images, legalities, prices, and related metadata come from Scryfall bulk data and linked Scryfall image URLs. Mana Foil does not bulk-rehost card images.

Buy links may point to vendor URLs provided by Scryfall. Prices are estimates from snapshots and are not a live storefront quote.

Imports from Moxfield or Archidekt process the deck or collection data you paste or export for Mana Foil. We do not scrape those services on your behalf.

Mana Foil runs on infrastructure operated by other companies, and they process data on our behalf in order to provide the service. We use Vercel for hosting and delivery, Neon for our database, Railway for scheduled background jobs, Upstash for the rate-limit counters that protect the service, Google for sign-in, Resend to deliver the price alert emails you opt into, and Discord to deliver the price alert messages you opt into. These providers are based in, or store data in, the United States.

We use Sentry for error monitoring, so that failures can be diagnosed and fixed. Error reports deliberately exclude your session cookies, request bodies, and URL query strings, and keep only a small set of technical headers. They can still contain the page you were on, the type of error, and identifiers for the deck or card involved.

If you send feedback or a bug report, its contents are relayed to a private team triage channel hosted on Discord — see "Feedback and bug reports" below. If you link a supporter account, Patreon processes your payment and tells us your tier; we never receive your payment details.

Card images are loaded in your browser directly from Scryfall rather than copied onto our servers, which means Scryfall receives your IP address and browser details when a card image loads, the same as visiting any website that links an image.

We do not sell your personal information, and we do not use it for advertising.

Mana Foil notifies you in the app by default. If you turn on email price alerts in account settings, we also send one email a night listing the tracked cards whose prices moved. We send it only while that setting is on, and only to a verified address.

We send it because you asked us to, and you can withdraw that at any time: turn the setting off in account settings, or use the unsubscribe link in any of those emails, which works without signing in. Turning it off stops the email and changes nothing about your in-app notifications.

We use Resend to deliver these messages. To send one, Resend receives your email address and the contents of the message, which includes the cards you track and the prices we observed for them. Resend also tells us when a message bounces or is reported as spam.

We keep a list of addresses that bounced or were reported as spam so we stop sending to them, which we are obliged to do to keep our mail working for everyone else. An entry on that list records the address, the reason, and the date, and nothing else about you. Because its purpose is to stop us contacting an address, it is kept even if the account is deleted; you can ask us to remove an entry through the support page.

Decks are private unless you choose a sharing option. Future public and unlisted deck features will show the deck contents and your public handle according to the visibility you choose.

Do not publish deck names, notes, or categories that contain private information you do not want other people to see.

If you support Mana Foil through a supporter tier, we store your supporter tier and the identifiers needed to grant your perks — such as the link between your Patreon account and your Mana Foil account, and the Discord role assignment if you join the supporter server. We use them only to show your supporter cosmetics and grant access perks.

You can also connect your Discord account to Mana Foil itself, which is separate from anything Patreon does. When you connect it we store your Discord account ID and the access tokens for that connection; we do not store your Discord username, and instead ask Discord for it each time the page loads. We also ask Discord whether that account is in the Mana Foil server, so we can tell you whether a message could reach you. We use all of this only to deliver the price alerts you switch on, and connecting on its own sends you nothing. You can disconnect it at any time in account settings, which deletes what we stored and stops any Discord messages.

Supporter payments are processed by Patreon. Mana Foil never sees or stores your card, bank, or billing details.

We keep the Patreon link until you unlink it or delete your account. Unlinking removes the link and your live supporter entitlement, but never removes your Hall of Foil engraving.

Supporter walls, such as the Hall of Foil, list your public Mana Foil handle — never your Patreon identity, payment details, or email. You can ask us to hide your wall entry at any time.

If you send feedback or a bug report, your message and any screenshots you attach are relayed to a private team triage channel and are not published anywhere. Avoid including personal information you would not want the team to see.

We do not store report contents on our servers or in our logs; the private triage channel is the only copy.

You can edit your public handle and download a full account export from account settings.

You can also permanently delete your account from account settings. Deletion is immediate and removes your profile, collection, play sessions, and all decks, including public decks. There is no soft-delete or grace period.

Aggregated, de-identified deck statistics may be retained after deletion. They contain no link to you, and unshared entries are pruned automatically.

Questions about this policy can be sent through the support page.