Privacy Policy

Last updated: September 16, 2026

Mauldron is a hobby project for Magic: The Gathering Commander players. This policy explains what we collect and why. We keep it minimal on purpose.

It covers both mauldron.com and the Mauldron life counter for iOS. They are one service sharing one account, so unless a section says otherwise everything here applies to both.

What we collect

Account info — your email address, an optional display name, and a securely hashed password (we never store your password in plain text).
Your content — the decks, collections, and playgroup/game data you create in the app.
Operational logs — standard server logs (e.g. IP address, request times) used to run the service, debug issues, and prevent abuse.
Anonymous traffic counts — when you open a page we add +1 to a daily counter. The whole record is: the date, the page, the country the request came from, the website that linked you here (its name only, like “google.com” — never what you searched for or the address you came from), and whether you were signed in. Public pages such as an individual card are counted by name; anything belonging to a person is counted only by type — “a shared deck”, never which one, and never whose. No IP address, account, cookie, session identifier or device fingerprint is stored or derived, and we don't create any per-visitor identifier, so these counts can't be traced back to you or joined to your account. We use them only to see roughly how many people use the site and how they find it.

Pods and shared games

A pod is a private playgroup you join with an invite code. Only its members can see it. Inside a pod:

Members see you by your table name (set in account settings), or your display name if you haven't set one. They never see your email address.
Members can seat you in a game. That game then appears in your game history and counts toward your record. You can take any such game out of your history at any time; it stays in the other players' history.
Members see the pod's combined deck totals (for example, how much removal the group runs) but not your deck lists or private deck names.
Leaving a pod stops members seating you in new games. Games you already played stay in your history.

Nothing about a pod is public or searchable, on the website or in the iOS app.

How we use it

To provide the deck-building, analysis, and collection features you ask for.
To authenticate you, send password-reset and email-verification messages.
To protect the service against abuse (rate limiting, spam prevention).

We do not sell your personal data, and we don't show third-party advertising.

Third-party services

Email — transactional emails (password reset, verification) are delivered via Resend.
Card data — card information and prices come from Scryfall; combo and synergy data from Commander Spellbook and EDHREC. Browsing these does not share your identity with them.
Card scanner (optional) — if you use the camera scanner, an image may be sent to Google Cloud Vision for text recognition only. Images are not retained for this purpose beyond the recognition request.

Cookies

The website uses a single session cookie to keep you logged in. We don't use tracking or advertising cookies. The iOS app uses no cookies at all — see below.

The iOS app

The Mauldron life counter for iOS talks to this same service and is covered by everything above. A few things are specific to it:

No tracking and no ads. The page-counting described above is website-only. The app sends us nothing beyond your account, your games, and the request itself: no advertising identifier, no device fingerprint, no location, and nothing from your contacts or photos. We would have no way to store such a thing if it were sent.
Signing in stores two tokens on your device: a short-lived one that expires after fifteen minutes, and a long-lived one used to get fresh ones. We keep only a one-way hash of the long-lived token, never the token itself, alongside the date it was issued and a device name if your app supplied one (“Sam's iPhone”) so you can tell your devices apart. Signing out, or changing your password, retires them.
Your games — life totals, counters, turns, and the game log — sync to your account so they appear in your history on the website. A game you played with no signal is stored on your device until it can be uploaded. Games you never upload stay on the phone.
Deleting your account from inside the app is supported and does the same thing as deleting it on the website: everything goes, including every signed-in device.

Your choices

From your account settings you can change your password, change your email address, export a copy of your data, and permanently delete your account — all without asking us. Deletion is immediate and cannot be undone. You can also delete your account from inside the iOS app. If you'd rather we did it for you, just ask.

Contact

Questions? Email [email protected].