Privacy Policy

Effective date: November 10, 2026 · previously October 17, 2026

What TCG Guilds is

TCG Guilds is a mobile app (with a web companion) for tracking a Magic: The Gathering collection, understanding what your decks need, and sharing chosen parts of your collection with groups you join (“guilds”). This policy describes what we collect and how we use it.

What we collect

  • Account data:your email address and a display handle you choose. Your handle is shown to guildmates, on any deck you share, and — only if you turn on a public profile — as your profile’s web address.
  • Collection and deck data:the cards, quantities, locations, decks, and wants you enter. This is the product — it exists so the app can show it back to you, and, when you share a deck, to show that deck’s list to the people described under Sharing controls.
  • Voice recordings: if you log cards by voice, the audio clip is sent to a transcription service to turn it into card names, then used only for that purpose. Voice logging is optional.
  • Photos:if you capture binder pages or loose cards, the images are stored so you can resolve them into collection entries later. To identify each card, its photo is sent to Anthropic (see Service providers) — on every scan, separately from the “Help improve scanning” setting below.
  • Scan photos (“Help improve scanning”): when this setting is on — it is on by default — and you confirm or fix a scanned card, we receive that one downscaled photo, what the scanner answered (its top guesses and their match scores), the card you confirmed, and two technical labels: which recognition method produced the guesses, and whether the photo was a binder page or a loose card. We use these only to make scanning more accurate. Nothing is shared while the setting is off. You can turn it off any time on the Account screen; deleting your account deletes your shared photos with it.
  • Usage and diagnostics: basic product analytics (which features are used) and crash/error reports, so we can fix what breaks.

What we do not do

  • We do not sell your data.
  • We do not show your collection to anyone outside a guild you have chosen to join, except through a shelf, deck or profile link you choose to share.
  • We never see or store your card or bank details. If you subscribe to Premium in the iPhone app, Apple processes the purchase through your App Store account; in the Android app, Google Play processes it through your Google account; if you subscribe on the web, Stripe processes it on RevenueCat’s checkout page. Their privacy terms apply to the payment itself. We keep a record of your subscription — the plan, its price, currency and country, the store’s transaction IDs, its dates, and for a web purchase the email you checked out with — so we know whether your account has Premium.

Sharing controls

Guild membership is the unit of sharing for your cards, plus an optional shelf link you mint; decks have their own switch. If you are not a member of any guild and have shared no shelf, deck or profile link, nothing of yours is visible to another person. When you join a guild, the cards you have logged become searchable by the other members of that guild, and they stop being visible the moment you leave it. Joining a guild is always an explicit action you take. Sharing a shelf link is a separate explicit action: anyone with that link can see the cards you have marked up for trade (the same slice guildmates already see), until you pause or stop the link.

Within a guild, we share the least we can: the card, its set and collector number, its status (for example “for trade”), and your handle. How many copies you own, where you store them, and any notes you have written are not shared unless you turn on full detail for that specific guild. The price you would ask for a card is never shown to anyone, at any setting.

We are being precise here because an earlier version of this policy was not. It said each item was private by default and shareable per item. That has not been accurate since we changed the sharing model to work at the guild level: items you log are visible to guilds you belong to, and there is currently no per-item visibility switch in the apps. Nothing was ever exposed outside a guild you joined, but the wording overstated the control you had, and this section now describes what the product actually does.

Shared decks and public profile

Each deck is either Shared or Private, and you can change it any time from the deck’s menu. A Shared deck shows its name, the folder you keep it in, and its card list to members of guilds you belong to, and to anyone who has its link — a link only you can hand out; nobody can find a deck by searching, and we do not list decks anywhere. If you leave a guild, its members stop seeing your decks in the app, but a link you have already given out keeps working until you make that deck Private. A shared deck shows the cards it runs and how many of each; it never shows which of those cards you own, where they are stored, your notes, or anything else in your collection. Decks you made before deck sharing arrived stay Private until you share them; new decks you make in the current app start Shared.

Members of guilds you belong to can open your profile, which lists your Shared decks, the folders they are in, and your shelf link while it is live. Separately, you can turn on a public profile (off by default): the same page at your handle, for anyone who opens it. Profile links use your handle, so if you change your handle, old links stop working and the old name can be taken by someone else.

Finding guilds

Guilds can be listed in a public directory so players can find a table near them. A listed guild shows its name, city, state or region, member count, and whether it accepts anyone or requires approval— to any signed-in TCG Guilds user, not only to its members. It never shows the roster, who owns it, or anything from anyone’s collection. The member count is a number and nothing else: it does not name or reveal a single member.

Guilds are listed by default. A guild admin can turn listing off at any time from the guild’s About screen, and a hidden guild is then reachable only by invite link or Guild ID, exactly as it was before the directory existed.

A guild’s city is location information, and it is deliberately coarse. It is a city that a guild admin typed to describe where that guild plays. It is not a member’s address, it is not a precise location, and it is never derived from your device — we do not ask for or collect device location at all. If a guild is listed, its city is visible to every signed-in user.

If you ask to join a guild that requires approval, you may include a short note (up to 280 characters). That note and your handle are shown to that guild’s admins— people you may not have met — so they can decide. Other members of that guild do not see it. The note is optional, it cannot be edited once sent, and it is deleted when your request is approved, turned down, or withdrawn.

Service providers

We use a small set of providers to run the service:

  • Supabase — database, authentication, and file storage.
  • Resend — delivers account emails such as sign-up confirmation and password reset; it receives your email address.
  • Vercel — web hosting.
  • OpenAI — speech-to-text for optional voice logging.
  • Anthropic— AI that reads the card in each scan photo, and that summarizes an engine you describe (it receives those card names and your description) or a card’s rules text. It is not sent your email, handle, or account ID.
  • Google ML Kit— built into the Android app, it reads the text on cards you scan. The reading happens on your phone: ML Kit does not send the photo or the text it reads to Google. Whenever it runs, it sends Google metrics about its own use, for Google’s own purposes: information about your device (such as its maker, model, Android version and build, and its machine-learning hardware), the app’s package name and version, ML Kit’s version, what it did (such as starting up or reading an image), how long that took, its settings (such as the image’s format and resolution), the size of what went in and came out, any error code, and an identifier for this installation of the app that Google says is not intended to uniquely identify you or your device. Google uses these metrics to measure, debug, maintain and improve ML Kit and to detect misuse or abuse, under its own privacy policy; it says it encrypts them in transit and does not pass them on to anyone else. ML Kit may also contact Google from time to time to receive updates, such as bug fixes. We do not give ML Kit your email, handle, or account ID.
  • Sentry — crash and error reporting.
  • RevenueCat — Premium subscription management. It receives your account ID when you sign in to the app, the details of any subscription you buy, and, for a web purchase, the email you check out with.
  • Stripe— processes card payments for Premium bought on the web, on RevenueCat’s checkout page.
  • Expo, Firebase Cloud Messaging (Google) and Apple Push Notification service— deliver push notifications. They receive your device’s push token and each notification: its text, such as the handle of the member who sent you a trade proposal, and the IDs the app needs to open it.
  • Apple App Store and TestFlight— app distribution. TCG Guilds is published on the App Store; TestFlight is still used for pre-release builds. Apple’s own privacy terms apply to both.
  • Google Play— app distribution on Android, and payment for Premium bought in the Android app. Google’s own privacy terms apply.
  • Scryfall — card names, data, and images shown in the app are provided by Scryfall.
  • Archidekt — when you paste an Archidekt deck link to import a deck, our server requests that public deck from Archidekt. Archidekt sees a request from our server for that deck; it does not receive your account details.

Data retention and deletion

Your data is kept while your account is active. You can delete your account yourself from the Account screen in the app or on the web — on the web, sign in at app.tcgguilds.com/account, choose Delete account and type the confirmation phrase. Deletion is immediate and permanent. You can also request an export or full deletion of your account and its data at any time by emailing support@tcgguilds.com; deletion via email is completed within 30 days. Deleting your account also deletes your decks and profile, and every deck or profile link you shared stops working immediately.

Changes to this policy

We will update this page when the policy changes and adjust the effective date above. Material changes will be announced in the app.

Contact

Questions about privacy: support@tcgguilds.com