Privacy Policy

Effective October 23, 2026

Planeskeeper is a Magic: The Gathering collection and deck app for iPhone, Android and the web at planeskeeper.dev. It is run by CyberBuddy(“we”). This page says what we collect, why, who else sees it, and how to get it deleted. Questions go to cyberbuddyps@gmail.com.

The short version

  • You can use the apps as a guest. Guest cards and decks stay on your device.
  • If you create an account, your collection, decks and related data sync to our database (Google Firebase) so they show up on every device.
  • Card scanning happens on your phone. Camera images are never uploaded.
  • AI features send the deck or card list you're asking about to Anthropic (Claude). We don't store the prompt or the answer.
  • No ads, no advertising IDs, no selling or renting your data.
  • You can delete your account and data from the app at any time. See Delete your account.

What we collect and why

AccountWhat it isA user ID. Your email address and password (the password is handled by Firebase Authentication; we never see it), or your Sign in with Apple ID, which may include your name and an email address or Apple private-relay address. Every app install also gets an anonymous guest ID.WhyTo sign you in and keep your data tied to you.
Collection and decksWhat it isCards you add (name, set, quantity, condition, foil, language, price paid, storage location, notes), decks (name, format, commander, card lists, strategy notes, tags, version history), wishlist, price alerts and trade binder. Synced only when you are signed in with an account.WhyTo provide the app and sync it across your devices.
Trades and game logsWhat it isTrades you record (items, prices, notes and the trade partner's name as you type it) and games you log (deck, result, opponents' commanders, players, turns, notes).WhyTo provide those features. Please only enter other people’s names if you are comfortable doing so.
MTG Arena dataWhat it isIf you import your MTG Arena collection: card counts, wildcards and other inventory figures from the import.WhyTo show what you can build in Arena.
PurchasesWhat it isYour plan, product ID, expiry date, platform, Sparks balance and purchase transaction IDs. Never your card number.WhyTo unlock what you paid for on every device and to stop a purchase being redeemed twice.
AI usageWhat it isA count of AI requests this month (reset on the 1st) and Sparks spent.WhyTo apply your plan’s monthly AI limit.
Comments, reviews and votesWhat it isWhere these features are available: what you write on public decks, star ratings, likes, reports you file and users you block, stored with your user ID and display name.WhyTo run the community features and keep them safe.
Diagnostics (Android only)What it isGoogle's ML Kit, which reads card names on the device, sends Google basic usage and performance data with a per-installation identifier.WhyGoogle uses it to keep ML Kit working. We don’t receive it.

We do not collect your location, contacts, photos, browsing history or advertising ID. The apps contain no advertising, analytics or crash-reporting SDKs.

Camera and photos

The card scanner uses your camera to read the card name. Text recognition runs on your device (Apple Vision on iPhone, Google ML Kit on Android). Frames are discarded as soon as they are read; no image is stored or uploaded. Only the recognized card name is sent to Scryfall to look the card up.

On iPhone, the Life Counter can use a photo from your library as a player background. It stays on your device.

AI features

AI features (deck analysis, deck building, Build from Collection, Smart Search, the tutor and similar tools) send the text needed to answer your request to Anthropic through our server. That can include deck lists, card names from your collection and anything you type into the request. It does not include your email address or name.

We store only the count of requests. Anthropic processes the request as our service provider under its commercial terms, which do not allow it to train its models on this data.

What other people can see

  • Public decks. Decks are private by default. If you mark a deck public, it is listed on planeskeeper.dev (Explore, commander pages, search engines) with your display name, and your public decks are gathered on a profile page.
  • Share links.A synced deck can be opened by anyone who has its link (planeskeeper.dev/deck/…), even if it isn't public. The link contains a long random ID and isn't listed anywhere, but treat it like a shared document link.
  • Comments and reviews you post on public decks are visible to everyone, with your display name.

Your collection, trades, game logs, wishlist and purchases are never public.

Who we share data with

We don't sell or rent personal data, and we don't share it for advertising. We use these service providers to run Planeskeeper:

Google Firebase (Authentication, Firestore, Cloud Functions)Accounts, database and server code. Servers are in the United States.
AnthropicAI features, as described above.
Apple App Store, Google Play, StripePayments. They process your payment details; we receive only the result and transaction IDs.
A receipt-validation server we use for iOSChecks App Store subscription receipts. Receives the signed receipt and your user ID.
ScryfallCard data, images and prices. Receives card names and IDs, not your account details.
Commander SpellbookCombo data. Our server looks up combos; your account details are not sent.
VercelHosts planeskeeper.dev and provides privacy-friendly page-view statistics.

We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or transfer of Planeskeeper (in which case this policy continues to apply).

Cookies and the website

planeskeeper.dev does not use advertising or tracking cookies. Firebase keeps you signed in using your browser's storage (IndexedDB), and some features (such as saved progress and MTG Arena imports) store data in your browser. Vercel Web Analytics counts page views without cookies and without identifying you. Stripe sets its own cookies on its checkout pages to prevent fraud.

On your device, the apps keep a local copy of your data. On Android, that copy may be included in your Google device backup if you have backups turned on.

How long we keep it

  • Account data is kept until you delete your account or ask us to.
  • Deleting your account removes it immediately. A few records are kept, as listed on the Delete your account page.
  • The monthly AI request count resets each month.
  • Apple, Google and Stripe keep their own payment records under their own policies.

Your rights

Wherever you live, you can ask us to access, correct, export or delete your personal data, and you can object to how we use it. Email cyberbuddyps@gmail.comand we'll respond within 30 days. You can also delete everything yourself in the app.

EU, EEA and UK. We process your data to provide the service you asked for (contract), and to keep it secure and prevent abuse such as purchase fraud and spam (legitimate interests). Your data is stored in the United States; transfers rely on the safeguards our providers offer, such as Standard Contractual Clauses. You can complain to your local data protection authority.

California.We don't sell or “share” personal information as the CCPA defines those terms, and we don't use sensitive personal information. We won't treat you differently for using your rights.

Children

Planeskeeper is for people 13 and older (or the higher minimum age where you live) and is not directed at children. If you believe a child under 13 has given us personal data, email cyberbuddyps@gmail.com and we will delete it.

Security

Data is encrypted in transit (HTTPS) and stored with Google Firebase. Database rules limit your private data to your own account. No system is perfectly secure, so use a password you don't use elsewhere.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll also tell you in the app or by email before they take effect.

Contact