Privacy Policy

Last updated: September 20, 2026

1. Overview

MTG Mate is developed and operated by Jacob Suchorabski ("I", "me"). This policy covers the MTG Mate app for iPhone and iPad and the website mtgmate.app, including the web library.

The short version: the app works without an account and keeps your data on your device. If you sign in to Cloud Sync, your card library is stored on my servers so it can reach your other devices. There are no ads and no advertising trackers, and I do not sell data.

2. Data that stays on your device

Without a Cloud Sync account, everything you create in the app is stored only on your device. Some data never leaves the device even when you are signed in:

  • Running games, player names and seat settings
  • Match history and the statistics built from it
  • The daily value history of your collection
  • App settings such as currency, seat colours and card language

3. Cloud Sync account

Cloud Sync is optional. When you sign in, the following is stored on my servers and linked to your account:

  • Your email address and, if you set one, your display name
  • Your card library: collections, decks with their notes, saved cards and chosen printings
  • Your friends list and the names you give your friends
  • Your trades: cards, quantities, prices, cash amounts and notes

You sign in with a link sent to your email address. There are no passwords. A sign-in link is valid for 15 minutes and can be used once. To limit abuse, each sign-in request stores a one-way hash of the IP address and of the browser or device identifier. The original values are not stored.

A session lasts up to 90 days and is renewed while you keep using the app or the web library. Signing out ends the session.

4. Website and web library

The website does not use advertising or tracking cookies and does not count page views. Card search on the website sends your search terms to Scryfall from your browser.

If you sign in to the web library, two first-party cookies are set:

  • mm_ws keeps you signed in. It holds a random session ID, cannot be read by scripts, and expires with your session.
  • mm_login_hint remembers your language and the page you came from while you sign in. It expires after 20 minutes.

5. Error reports and usage events

The app, the website and the servers send error reports and a small set of usage events to Sentry, hosted in the EU. They help me find crashes and see which parts of the app are used. Your email address and account ID are not attached, the contents of your library are not included, and network request details are removed before a report leaves the device. Reports contain technical details such as device model, iOS version and app version.

The usage events are:

  • First launch and the start of a session, with whether you are signed in
  • Sign-in, with whether it came from an email link or a restored session
  • Which of these areas were opened in a session: card search, My Cards, dice, synergy, trades
  • The end of a game, with its length in minutes and the number of players
  • Imports and exports, with the file format and the number of cards
  • Your answer when the app asks whether you enjoy it

There is currently no setting to turn these reports off.

6. Services the app relies on

These services receive data when you use the matching feature. Their own privacy policies apply.

  • ScryfallCard data, card images and prices. Searches and image requests go straight from your device or browser to Scryfall.
  • Commander SpellbookCombo lookups. The request contains the name of the card you are viewing.
  • CardmarketOnly when you tap the shopping cart on a card. The Cardmarket page opens in a browser view inside the app.
  • CloudflareHosting for the website, the Cloud Sync servers and the database.
  • ResendDelivers the sign-in emails. Resend receives your email address for this purpose.
  • SentryError reports and usage events as described in section 5.
  • AppleApp downloads, updates and ratings go through the App Store.

7. Deleting your data

Data on your device is removed when you delete the app.

You can delete your Cloud Sync account in the app under Settings, Profile. The account, your library, your friends list and your trades are removed from the database right away, and all sessions end. The app hands you a backup file of your library that you can keep or discard.

A copy of that backup is also kept in access-restricted storage so that an accidental deletion can be undone. Write to me if you want this copy removed as well.

8. Your rights

You can ask for a copy of your data, have it corrected or deleted, or object to its use. Send an email to the address below and I will answer within 30 days. If you live in the EU, you also have the right to complain to your data protection authority.

9. Changes to this policy

When this policy changes, the new version is published on this page with a new date.

10. Contact

Questions about this policy or your data: [email protected]