Privacy policy

Last updated: 6 November 2026 · Controller: Brightstep Tech Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA · Contact: [email protected]

Summary: we keep a log of the checks made (format, commander, currency, price cap and short card lists) for 90 days, to fix errors and improve the tool. The log is not linked to your name, account or IP address. A full decklist is logged only as its length. Results are not stored.

What we process

• Decklists and options: the card list, format, commander names, currency, price cap and cards to keep that the assistant (Claude or ChatGPT) sends for a check. They are processed in the server's memory for that request. The check itself (the tool's input) is written to a log with the minute, the tool name, whether it worked and which assistant made the call, kept for 90 days and used only to find and fix errors and improve the tool. Text longer than 200 characters, such as a full decklist, is logged only as its length; short inputs such as a few card names are logged as sent. It is not linked to your name, account or IP address, and it is never sold or shared.
• Usage statistics: for each tool call we record the hour, the tool name, whether it worked, which assistant made the call (Claude, ChatGPT or other, from the request's technical headers, plus the app name it declares), the country and language reported by ChatGPT, and a one-way hash of the anonymous user identifier from OpenAI. This is used only to count usage and fix errors, and is deleted after 90 days.

Legal bases

• Pricing and checking the cards you ask about: Art. 6(1)(b) GDPR (providing the service you request).
• Search log and anonymous usage statistics: Art. 6(1)(f) GDPR; our legitimate interest is to run the service, count usage, and find and fix errors.
• Security and delivery through Cloudflare: Art. 6(1)(f) GDPR; our legitimate interest is to keep the service secure and available.

What we do not collect

We do not collect names, email addresses, accounts, chat history, cookies or advertising identifiers, and we do not log IP addresses. Error logs record only the error type. We do not sell or share data and do not use it to train models. What you share with ChatGPT itself is covered by OpenAI's privacy policy.

Processors and location

The server runs on Amazon Web Services (Frankfurt, EU) (privacy notice). Requests to this service pass through Cloudflare, Inc. (content delivery network and TLS proxy), which processes the connecting IP address and the request data in transit to deliver them to our server; The server is in the EU (AWS, Frankfurt). Cloudflare operates a global network, so request data in transit may be processed outside the EU/EEA, including in the USA; such transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or on the EU Standard Contractual Clauses (Cloudflare privacy policy). Card data is downloaded from Scryfall once a day; apart from these processors, your decklists are not sent to Scryfall or any other third party. Card images in the results are loaded by your browser directly from Scryfall's image server (cards.scryfall.io), which then sees your IP address as with any image on the web.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection (to processing based on legitimate interests) and data portability. The log is not linked to you, so we usually cannot find your entries; tell us the date and the input if you want them removed. Write to [email protected]. You can also complain to a supervisory authority, in particular in your country of residence. In the UK you can complain to the ICO.

MTG Deck Price Checker is unofficial Fan Content permitted under the Fan Content Policy. Not approved/endorsed by Wizards. Portions of the materials used are property of Wizards of the Coast. ©Wizards of the Coast LLC.