Privacy

What CubeGatherer keeps about you

CubeGatherer is a small, non-commercial tool for gathering Magic cards among friends. No ads, no analytics, no tracking cookies. We keep only what the site needs to work.

What we store

• Cube owners: your email address (to send login links), your cubes and their card lists, and the history of what happened in each cube.
• Friends: the name you type when you join, and your offers: which card, lend, give or sell, your price, and any edition, condition or notes you add.
• Cookies: one session cookie that keeps you logged in or remembers which friend you are. For friends without an account it holds a random code; we only store a scrambled (hashed) version of it. There are no other cookies.

Who sees it

A cube's owner sees the names and offers of everyone who joins that cube. Other friends only see how many offers a card has, never who made them.

Services involved

• Hosting: our own server in the Netherlands. Backups are encrypted and kept for at most six months.
• Cloudflare delivers the site securely and therefore processes your IP address and requests.
• Mailjet (EU) sends login emails to cube owners.
• Scryfall provides card data and images. Your browser loads card images directly from Scryfall, which sees your IP address. Our card lookups contain no personal data.

Why

Only to run the service you asked for: gathering cards for a cube (GDPR art. 6(1)(b)), and keeping it secure (art. 6(1)(f)).

Your choices

• Download your data at any time: download as JSON.
• Delete it. Owners can delete a cube, or their whole account in Account settings. Friends can use “Delete my data” on any cube page they joined. Offers that never changed hands are removed. If you already gave or lent a card, the owner keeps a record of the card, but your name and notes are removed. To protect lenders, a cube that still holds a borrowed card can’t be deleted until the card is returned or the lender lets the owner keep it.
• You can also ask for a correction, object, or complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

Contact

Questions or requests: ask the cube owner who shared the link with you.