Privacy policy

MTG Omni is published by Mathieu Côté, in Québec, Canada. This policy explains what information the MTG Omni apps and website handle, why, and what you can do about it. In short: your collection lives on your phone, there are no ads, no analytics and no tracking, and we only keep what you choose to send us.

On your phone

• Your collection, decks, buy and trade lists, guest decks, game log, prices you paid and settings are stored on your device. They are not sent to us unless you use one of the online features below.
• The camera is used to read your cards. Text recognition runs on the device (Apple's Vision framework on iPhone, Google's ML Kit on Android). Camera images and photos you pick are not saved by the app or uploaded. On Android, Google's ML Kit may send Google anonymous performance and usage metrics about the recognition feature itself, under Google's terms.
• Price alerts are notifications created on your device; no push service or server is involved.
• Sharing a deck or a backup with a nearby phone, and companion mode at the Life table, connect the two phones directly (Bluetooth, local network or QR code). Nothing goes through our server.
• Backups are files saved on your device or where you choose (for example Files, iCloud Drive or Google Drive). Your phone's own system backup (iCloud or Google) may also include the app's data, according to your device settings.

Card and price services

To identify cards and show images, prices and suggestions, the apps contact these public services directly. They receive card names, set codes and similar searches, never your name or email, and, like any website, they see your device's IP address:

• Scryfall: card data, prices, card images and set symbols.
• EDHREC: commander suggestions (the commander's name is sent).
• Frankfurter: currency exchange rates.

Information you send us

These features are optional. We only receive this information when you use them.

• Account. Your email address, a securely hashed password (we never see the password itself), the sign-in tokens that keep you logged in on the website and in the app, and the dates they were created. We use your email only to send account emails: sign-up and password-reset codes, sign-up confirmations, log-in links and email-change confirmations.
• Published decks. When you choose Publish online, we receive the deck's name, cards (with sets and numbers), commanders, colors and power level, and its game history: dates, number of players, turns, whether it won or went first, and each opponent's deck name, the owner name you entered for it, its commanders and whether it won. The deck gets a public page that anyone with the link can see. Opponent owner names are only shown to you.
• Anonymous statistics. Each published deck is also copied, without your account, email or any owner names, into an anonymous dataset (commanders, colors, power level, cards, and games with only the date, results and opponents' commanders). It powers the card, commander and win-rate statistics on the website. These copies cannot be linked back to you.
• Buy as proxies. When you send a proxy request, we receive the name and email you enter, the deck name, the list of cards, and the app's platform and version. We use them to prepare your order and contact you about it.
• App version check. When the app opens, it asks our server for the minimum supported version of its platform. No information about you is sent.

How it is stored and who processes it

• The website and its database are hosted by Amazon Web Services in Canada (Montréal). Daily database backups are kept in the same region for 30 days.
• Account emails are sent through Amazon Simple Email Service.
• Our server keeps short technical logs (pages requested, response times) to keep the service running. They do not record your IP address.
• We do not sell or rent personal information, we do not show ads, and we do not use analytics, advertising or tracking tools in the apps or on the website.

How long we keep it, and deleting it

• You can delete your account at any time in Settings on the website. This deletes your account, all its sign-ins (including the app's) and every deck you published, with its public page and games. Copies in backups disappear within 30 days.
• Anonymous deck copies are kept after a deck or an account is deleted, since they contain no personal information.
• Proxy requests are kept so we can follow up on your order. Ask us at the address below to have yours deleted.
• Everything stored only on your phone is removed when you delete the app (except backups you saved elsewhere).

Your rights

Under Québec's Act respecting the protection of personal information in the private sector and Canada's PIPEDA, you can ask to access the personal information we hold about you, have it corrected or deleted, withdraw your consent, and ask questions about how it is handled. You can also file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

Children

MTG Omni accounts and online features are not intended for children under 14, and we do not knowingly collect their personal information.

Changes

If this policy changes, we will update it on this page with a new effective date. Significant changes will also be announced in the app or by email to account holders.

Contact

The person in charge of the protection of personal information is Mathieu Côté. Write to privacy@ogma.app for any question or request about your information.