Life LogMy stuff

Privacy

What is stored, where, and what reaches other servers, in plain words.

The short version: What you make stays in your browser. If you sign in, it is also kept in your account so it is on every device you use. There are no cookies, no analytics and no ads.

What is stored, and where

  • Your decks, collection, wishlists, trades, Market watchlist, draft picks, eval sheets, cubes, game diary and settings are stored in this browser, in its IndexedDB and localStorage.
  • If you sign in, most of it is also kept in your account, so it is the same on every device: what goes there, and what stays here.
  • The site's pages, scripts and card data are saved in this browser too (its cache), so the tools open offline.
  • A share link carries the deck or trade inside the link itself; nothing is published unless you send the link to someone.

Your account: what goes to Supabase

Accounts run on Supabase (supabase.com), which stores them for this site, in its US East (North Virginia) region. Signing in is a choice: every tool works without it. When you sign in, your account holds:

  • Your sign-in, in Supabase's own sign-in tables: your email address, how you sign in (an email link or code, Google or Discord), when the account was made and when you last signed in, and, for each sign-in session, the browser's IP address and its name and version (its user agent), which Supabase's sign-in service records. With Google or Discord, also what that service sends (below).
  • Your saved things, in the table items: one row for each thing that syncs, holding a key that names it (like deck: and an id, or collection), its kind, its name (a deck's or list's title), the thing itself as this browser saves it (a large one packed with gzip), a revision number, when it was made and last changed, and when it was deleted. A deleted thing leaves an empty row marked deleted, so your other devices remove it too, and Recently deleted keeps a copy of it for 30 days, in your account as well, until you put it back or it is let go.
  • What syncs: decks (with their versions, notes, plans, logged matches and share settings), the collection (with your own values and notes on copies), eval sheets, cubes, drafts, drafts with friends by link, sealed pools, pack 1 pick 1 questions and answers, trades and lists saved from links, Haves lists, friends kept from their links, the Market watchlist and price alerts, saved searches, the Wildcard Planner, Film Room, Prep (the field desk, the events you run and the event ledger), the Game Diary's events, card packages, playgroups, league seasons, Life Log's playgroup ledger, Recently deleted, and your icon. Some of these hold other people's names as you typed them (players, friends, opponents).
  • What stays on this device only: pictures you upload (your picture, deck pictures, photos of your copies), a game in play (Life Log, King Goldfish), Life Log's past games, settings for this browser (display, shortcuts and each tool's view), the backups you make, and caches of card data and prices.
  • Your profile, in the table profiles: a row made with the account, holding an empty handle, a default icon name and empty settings. The site doesn't fill it in or show it.
  • If you share with friends (Collection, Friends, while signed in): the trade binder and wishlists you choose, and the name you type, go in one row that anyone with its code can read until you stop sharing. Pairing a phone with Intake passes the cards you scan through a row in your account while the two are paired.

Only you can read or change your rows: the database checks every request against your sign-in (row level security), and a shared row opens only with its code. Nothing in your account is public, sold or used for ads.

Signing in

  • By email: your address goes to Supabase, which sends you an email with a link and a six-digit code through Resend, the email service the site uses. That service receives your address and the email's text (the link and the code) to deliver it, and keeps them for 30 days.
  • With Google: Google tells Supabase your email address, your name on Google, your Google account id and the address of your Google profile picture, and Supabase keeps them with your sign-in. Google learns that you signed in here.
  • With Discord: Discord tells Supabase your email address, your Discord username, your Discord id and the address of your Discord avatar, and Supabase keeps them with your sign-in. Discord learns that you signed in here.
  • This site reads only your email address (shown in the menu and My Stuff) and which ways you sign in. It doesn't show or use your name, id or picture from Google or Discord, and it never posts anything for you.
  • Your sign-in on a browser (the session Supabase issues) is kept in that browser's localStorage, not in a cookie. Signing out ends it.

Signing out, and deleting your account

Sign out from My Stuff; on a shared computer, choose to remove everything of yours from that browser as you sign out. My Stuff also downloads everything as one file. Delete account (in My Stuff, after you type "delete") removes your sign-in and every row of your account at once, for good, on every device. What is in a browser stays there until you clear it (Delete everything, in My Stuff). Supabase's own records of sign-ins (its logs) and its backups of the database, where its plan keeps any, aren't part of your rows: Supabase keeps and expires them on its own schedule. To have your account deleted without signing in, email [email protected] from its address.

What reaches other servers

  • Card pictures load from Scryfall's servers (cards.scryfall.io).
  • When you refresh prices, the Scryfall ids of the printings in question are sent to Scryfall (api.scryfall.com) to read today's prices.
  • The site's fonts are served from this site, not from a font service.
  • Cloudflare hosts the site, so your browser's requests for its pages and files go to Cloudflare.
  • Signed in, your saved things travel between this browser and Supabase (above), over HTTPS.
  • A link to another site (a store, a rules page) is only followed if you open it.
  • The deck, trade or list itself rides after the # in the link. A browser never sends that part to any server, ours included: only the person who opens the link reads it, in their own browser.
  • A deck link and a Haves List link can also carry a short preview before the #, so a chat app (iMessage, Discord, Slack) shows a title and a picture when the link is pasted: the deck's or list's name, its format and colors, its card count, the seller's name on a Haves List, and one card's picture id. That part reaches Cloudflare, which hosts the site, when the link is opened or when a chat app reads it for its preview. On a deck's share screen, turning off "Show the deck's name and a card picture when the link is pasted" leaves it out.
  • A deck link also carries a random id, made once when the deck is first shared. It says nothing about you, the deck or when it was made; it lets the person who shared it see "This is your deck" when they open the link again and the cards still match.
  • A friend's suggestions for your deck (their name, note and reasons) ride after the #, like the deck. Review in Decks keeps them after the # too.

The embed and autocard, on other sites

  • A deck embedded on another site (the /e/ address in a frame) reads its deck from after the # in its own address, so the deck isn't sent to us. Opening it asks Cloudflare for the embed's page, script and style sheet, and Scryfall for the card pictures, as any page here does. The site showing it can see that it embeds it, nothing more.
  • The autocard script that other sites include turns [[Card Name]] in their text into links to our card pages. It reads nothing else on their page and sends nothing from it: on hover it asks us for that one card's small file, and Scryfall for its picture, both with no referrer and no page text.

For parents

Every tool works without an account, so nobody is asked for a name, an email address or an age, unless they choose to sign in. There are no ads, no chat and no messages between players, and nothing a player saves is shown to anyone else unless they share it (a link, or a code for friends). A share link (a deck, a trade, a list) carries only what was typed into it, including any name typed there, so it is as public as the place it's posted.

Keep a backup

Clearing this site's data in your browser deletes everything you made here that isn't in your account. My Stuff downloads a backup file of all of it, and restores it.

Changes

If what is stored, or where, ever changes, this page changes first.