Vaultforge Privacy Policy

Vaultforge is a collection-first deckbuilder for Magic: The Gathering's Commander format — track what you own, build and diagnose decks, value your cards, and get upgrade recommendations. Unlike some of our other apps, Vaultforge has user accounts and a server, so it does collect and store some data to make the app work. This policy explains what we collect, why, and your choices.

What we collect

• Account details: your email address (for sign-in) and a password, which is stored only in hashed form — we never keep your password in plain text
• Your collection and deck data: the cards you mark as owned, the decks you build, and the deckbuilding data Vaultforge derives from them (valuations, diagnostics, and upgrade suggestions), tied to your account
• Payment status: if you subscribe to a paid plan, a customer identifier and your subscription status from Stripe, our payment processor (see Payments below)

How we use it

We use this data only to operate the app: to run your account, store and sync your collection and decks, compute valuations and upgrade recommendations, and provide the paid features you sign up for.

Card data (Scryfall)

Vaultforge uses card data and pricing from Scryfall, a third-party Magic: The Gathering data service, to identify cards and estimate their value. Card lookups do not include your personal information. Scryfall is not controlled by Vaultforge and is subject to its own terms and privacy practices. Card values are estimates and may not reflect current market prices.

What we do NOT do

• We do not use third-party advertising networks
• We do not sell your data
• We do not track you across other companies' apps or websites

Analytics

We use privacy-friendly, aggregate analytics to understand overall traffic and how the app is used. These collect anonymized, aggregated usage data and do not use cookies to track you across sites or build an advertising profile.

Payments

Vaultforge's paid plan is processed by Stripe. Stripe handles all payment processing and stores your card details; Vaultforge never receives or stores your full card number. We keep only the customer and subscription identifiers Stripe gives us so we can recognize your plan. See Stripe's own privacy policy for how it handles payment data.

Where your data lives

Your account, collection, and deck data are stored in a managed Postgres database hosted on Neon, accessed through an API hosted on Render. Data is encrypted in transit using standard HTTPS/TLS.

Your choices

• You can update or delete individual cards and decks from within the app
• You can request deletion of your account and all associated data by emailing support@clmsstudio.com
• You can manage or cancel your paid plan at any time through Stripe's billing portal, which Vaultforge opens for you from within the app

Children

Vaultforge is not directed at children under 13 and is not designed for use by children without supervision.

Changes to this policy

If this policy changes, the "Last updated" date at the top of this page will be revised. The current version always lives at this URL.

Contact

Questions about this policy? Email: support@clmsstudio.com