Last updated: 2 September 2026
You can use the entire deck builder without an account and without giving us anything. If you choose to make an account, we store your email address, a username, and the decks you save. We do not run ads, we use no third-party analytics or tracking pixels, and we do not sell or share your data with anyone. We do keep a simple, anonymous count of page views in our own database so we can tell whether anyone is actually using the site.
If you never sign in: nothing is sent to us. Decks you build are kept in your own browser's local storage on your device. Clearing your browser data deletes them.
If you create an account with email and password: we store your email address and a securely hashed password. We never see or store your password in readable form.
If you sign in with Google: Google sends us your email address, your name, and your profile picture URL. We use the email address to identify your account. We do not request or receive access to your Gmail, Drive, contacts, or any other Google service.
Either way, once you have an account we also store:
We do not collect your location, your IP address for profiling, your browsing history, or anything about you outside this site.
A deck saved to your collection is private. Only you can read it, enforced at the database level, not just hidden in the interface. A deck you explicitly choose to share with the community becomes public: its name, card list, and your username are visible to anyone. You can delete a public deck at any time from the My Decks page.
Your email address is never shown to other users.
Accounts and decks are stored with Supabase, which hosts the database and handles sign-in. The site itself is hosted by Hostinger, which keeps standard web server logs. Fonts are served by Google Fonts. Those providers process data on our behalf under their own privacy policies.
So we can tell whether the site is being used and whether anything we post about it works, each page load records four things in our own database: the page you landed on, the referring site if your browser sent one, whether it was the first page of your visit, and the date and time.
That is the whole record. No cookie is set for it, no IP address or device fingerprint is stored, nothing is linked to your account, no third-party analytics service is involved, and the data never leaves our database. It cannot identify you and we could not single out your visits if we wanted to. Counts are only ever looked at in aggregate.
The Gear & Lore section links to Amazon. Those are affiliate links: if you buy something after following one, we may earn a small commission at no extra cost to you. They are ordinary links, they set nothing on your device, and we are not told who clicked them. Amazon handles your visit under its own privacy notice once you land there.
We use no advertising or tracking cookies. Your browser stores a sign-in token so you stay logged in, plus your in-progress deck and a few interface preferences. All of it is local to your device and you can clear it any time through your browser settings.
The Fixer is optional and off unless you supply your own Anthropic API key. That key is stored only in
your browser's local storage and is never sent to us or to our servers. When you use the feature your
browser talks to Anthropic directly, and your prompt and deck list are handled under
Anthropic's privacy policy.
Remove the key with localStorage.removeItem('ncm-oracle-key') or by clearing site data.
This site is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.
If this policy changes in a way that affects what we collect or who sees it, we will update the date at the top of this page and note the change on the site.
Questions, deletion requests, or anything else: mpoulter82@gmail.com.