RareCard is an AI assistant for Magic: The Gathering. This policy explains what we collect, why, and who else touches it.
What we collect
Account details. If you sign in, our auth provider (Clerk) stores your email address, username, and profile image. RareCard stores your user id alongside your data.
Your conversations.Messages you send and the assistant’s replies are stored so your chat history persists across devices. Signed-out guests are not persisted at all.
Your decks. Decks you import or paste, including their names and card lists.
Usage counters. Per-day token totals used to enforce plan limits, and a signed cookie (rc_anon) counting guest messages. The cookie holds a number and a signature — no personal data.
Product analytics. Pageviews, and the utm_* tags and referrer on the link you arrived through, so we can tell which channel sent you. Tied to your account only after you sign in.
What we don’t do
We don’t sell your data.
We don’t run advertising or third-party ad trackers.
We don’t use your conversations to train models. Anthropic does not train on API traffic sent through RareCard.
Who we share it with
These processors handle data on our behalf:
Anthropic — your messages are sent to the Claude API to generate replies.
Clerk — authentication and subscription billing (payments are processed by Stripe; RareCard never sees your card details).
Neon — the Postgres database storing conversations and decks.
Vercel — hosting and request logs.
PostHog— product analytics (pageviews and signup attribution). No advertising, and we don’t sell this data.
Scryfall, EDHREC, and 17Lands— queried for card data. These requests come from our servers and carry no personal data. Card images load in your browser directly from Scryfall’s CDN.
TCGplayer and Impact — only when you click a buy link. See our Affiliate Disclosure.
Public profiles
Profiles and decks are private by default. Nothing becomes publicly visible until you turn it public yourself in your account, and you can make it private again at any time. A public deck page shows the deck name, format, and card list to anyone with the link.
Your choices
You can delete individual decks and conversations in the app, and delete your entire account — which removes your conversations, decks, and usage records — from your account page. To request a copy of your data, email us.
Retention
Conversations and decks are kept until you delete them or delete your account. Usage counters are kept for billing and abuse prevention.
Children
RareCard is not directed at children under 13, and we don’t knowingly collect their data.
Changes and contact
We’ll update the date at the top when this policy changes. Questions or requests: rarecardchat@gmail.com.