Privacy Policy
Last updated: October 23, 2025
Welcome to MagicSAK ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application.
By using MagicSAK, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.
1. Information We Collect
1.1 Information You Provide
When you create an account, we collect:
- Email address (required for account creation and authentication)
- Password (securely hashed and encrypted)
- Deck names and card selections you create
- Profile information you choose to provide
1.2 Automatically Collected Information
When you use our service, we may automatically collect:
- Device information (browser type, operating system)
- Usage data (pages visited, features used, time spent)
- IP address and general location information
- Cookies and similar tracking technologies
1.3 Third-Party Services
We use Supabase for authentication and database services. Supabase may collect additional information as described in their privacy policy.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Create and manage your account
- Enable you to create, save, and play with decks
- Allow you to share decks with the community if you choose
- Send you important updates about our service
- Respond to your comments and questions
- Detect and prevent fraud, abuse, and security issues
- Analyze usage patterns to improve user experience
- Comply with legal obligations
3. Information Sharing and Disclosure
3.1 Public Information
When you choose to make a deck public, the deck name and card list become visible to other users. Your email address and other personal information remain private.
3.2 Service Providers
We may share your information with third-party service providers who assist us in:
- Hosting and maintaining our infrastructure (Vercel, Supabase)
- Analytics and performance monitoring
- Security and fraud prevention (reCAPTCHA)
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
3.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or if we believe such action is necessary to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or abuse
- Protect the rights and safety of our users
3.4 What We Don't Do
We do not:
- Sell your personal information to third parties
- Share your email address with other users
- Send unsolicited marketing emails
- Use your data for purposes beyond those stated in this policy
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission (HTTPS/SSL)
- Secure password hashing
- Row-level security policies in our database
- Regular security audits and updates
- Access controls and authentication requirements
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Your Rights and Choices
You have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request corrections to inaccurate or incomplete information
- Deletion: Request deletion of your account and associated data
- Data Portability: Request your data in a portable format
- Opt-out: Opt out of certain data collection and processing
- Privacy Settings: Control whether your decks are public or private
To exercise these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Keep you signed in to your account
- Remember your preferences (theme, language)
- Analyze site usage and performance
- Provide security features
You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our service.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.
Publicly shared decks may remain visible even after account deletion, but will no longer be associated with your account.
8. Children's Privacy
Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.
9. International Users
MagicSAK is operated in the United States. If you are accessing our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our service, you consent to this transfer.
10. Third-Party Links
Our service may contain links to third-party websites or services (such as card image sources). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date at the top
- Sending you an email notification (for significant changes)
Your continued use of our service after changes become effective constitutes acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: contact@magicsak.com
Response Time: We will respond to your inquiry within 5 business days.
13. Additional Rights for Certain Jurisdictions
For California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt-out of sale (we do not sell your information)
- Right to non-discrimination for exercising your rights
For EU/EEA Residents (GDPR)
If you are in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including:
- Right to access and receive a copy of your data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
This Privacy Policy is effective as of October 23, 2025. Please review it periodically for updates.