The short version
GuyTheGathering keeps only what it needs to save your decks. There are no ads, no analytics or tracking scripts, and nothing is sold or shared for marketing.
What we store
- Your account: your username and your password, stored as a salted scrypt hash (we never see or keep the password itself).
- Your email address. It's needed to create an account, and used for two things only: a link to confirm the address, and a link to reset your password if you forget it. It's never shown to other players.
- What you make: your decks, collection and wishlist, and the decks you like or follow. Decks you make public, along with your username, can be seen by anyone.
- Popularity stats: finished public decks are counted, anonymously, in the "how many decks play this card" numbers shown for each commander. No one can see which decks were counted. You can leave any deck out with its In stats switch in the builder, or by keeping it private.
- A sign-in cookie called
session, which keeps you signed in for up to 30 days. It's the only cookie the site sets, and it's needed for accounts to work. - In your browser only: the deck you're working on is kept in your browser's local storage so it survives a reload. It isn't sent to us until you save it.
- Your IP address, held briefly in memory to slow down password guessing and spam. It isn't written to the database.
Who else handles it
- Hosting: the site and its database run on Railway.
- Backups: the database is copied continuously to Cloudflare R2 storage, so it can be restored if something breaks.
- Email: confirmation and password-reset emails are sent through Resend, which sees your email address and the message.
- Card data: card details and prices come from Scryfall through our server. Card images load straight from Scryfall's image server, so your browser connects to it directly.
Deleting your data
You can change your email or delete your account at any time in Account settings. Deleting the account removes it, your decks, lists, likes and follows straight away. Copies in our backups are overwritten within 7 days.
Children
GuyTheGathering isn't directed at children under 13, and we don't knowingly collect their information.
Changes
If this policy changes, the date at the top changes with it.
Not affiliated with Wizards of the Coast
GuyTheGathering is unofficial Fan Content permitted under the Fan Content Policy. Not approved/endorsed by Wizards. Portions of the materials used are property of Wizards of the Coast. ©Wizards of the Coast LLC.