Privacy Policy for the EDA app and companion website.

Overview

Elder Dragon Archives ("EDA," "we," "our," or "us") is a Commander game-tracking app for Magic: The Gathering players. This Privacy Policy applies to the EDA mobile app and the EDA companion website.

EDA is designed to support local-first play tracking, with optional account-based sync for users who choose to sign in. Some information stays only on your device unless you use cloud-backed features.

Information We Access or Collect

Depending on how you use EDA, we may access or collect the following categories of data:

• Account information, such as your email address and optional profile details you provide when creating or using an EDA account.
• Authentication and session data needed to keep you signed in securely.
• Gameplay archive data, including game names, player-entered names, commander and deck selections, life totals, poison counters, commander damage, timestamps, notes, results, and related archive statistics.
• Memory content, including photos you choose to take or select, local image file paths, and captions you add to game memories.
• Profile and archive metadata, such as local deck notes, deck URLs, descriptions, locally stored friend labels, usernames, and bios if those features are enabled for your account.
• Technical and storage data needed for app operation, such as local app state, guest mode state, cached commander images, and secure session storage.

How We Use Information

We use information covered by this policy to:

• create and maintain your local game archive;
• authenticate your account and keep you signed in;
• sync your archive to your EDA account when you request or enable sync-related features;
• display commander art, card metadata, deck history, memories, and archive statistics;
• respond to support, privacy, and deletion requests; and
• maintain, secure, and improve the app and website.

Local Storage and Guest Mode

EDA supports offline and guest use. In guest mode, your archive data is stored locally on your device. Local storage may include games, players, deck metadata, memory captions, local image paths, friend labels, and cached commander artwork.

If you do not sign in, this local data is not uploaded to our hosted database backend by default. Removing the app or clearing local app storage may remove guest data stored on your device.

Account and Cloud Sync

If you create or use an EDA account, we use a hosted authentication and database service for account sign-in and cloud data storage. When you sync account-backed archive data, EDA may store your profile, games, game players, life events, and memory metadata in our database systems.

At the time of this policy, memory photos are primarily stored as local device content, while related memory metadata may be synced with your account archive. Future storage changes may expand this behavior, and if they do, we will update this policy accordingly.

Camera and Photo Library Access

EDA requests camera and photo library permissions only when you choose to add a memory photo. We use those permissions to let you capture or select images for your game archive. We do not use camera or photo permissions for advertising, profiling, or unrelated background collection.

How We Share Information

We do not sell your personal or sensitive data. We may share or transmit limited data in the following cases:

• With service providers that provide authentication, database, storage, hosting, or related infrastructure needed to operate account and sync features.
• With service providers that host or deliver the website or app-related infrastructure when needed to operate EDA.
• With Scryfall or Scryfall-hosted image infrastructure when the app requests card image assets or uses Scryfall-derived card catalog data.
• When required by law, legal process, or to protect users, EDA, or the public.
• As part of a business transfer, merger, sale, or similar transaction, subject to applicable law.

Third-Party Services and Content

EDA relies on third-party services and third-party intellectual property in limited ways:

• A hosted authentication and database provider is used for account sign-in and database-backed sync features.
• Scryfall data is used for commander catalog information, print metadata, and card imagery support. Requests for remote card assets may cause your device to connect to Scryfall-controlled infrastructure.
• Magic: The Gathering names, card information, and related intellectual property belong to Wizards of the Coast and its licensors.

EDA is unofficial fan content and is not approved by, endorsed by, or affiliated with Wizards of the Coast. Portions of the materials used by EDA are property of Wizards of the Coast. Card data and imagery made available through Scryfall remain subject to Scryfall's terms and Wizards of the Coast intellectual property rules.

Data Retention

• Local-only data remains on your device until you delete it, clear app storage, or remove the app.
• Account and synced archive data is retained while your account remains active, unless you ask us to delete it or we need to retain certain records for security, fraud prevention, legal compliance, or dispute resolution.
• Cached commander artwork and related technical files may remain on your device until cleared by the app, the operating system, or app removal.

Deletion Requests

If you created an EDA account and want your account and associated cloud-backed data deleted, use the contact method listed on the Support page and clearly state that you are requesting account deletion. Deleting the app from your device may not by itself delete synced cloud data.

We may need to verify your request before processing deletion. If we must retain limited information for legal, security, or abuse-prevention reasons, we will retain only what is reasonably necessary for those purposes.

Security

We use reasonable administrative, technical, and organizational measures to protect data. These measures include secure session storage, authenticated access controls for account-backed data, row-level database protections for private archive records, and HTTPS for network transmission where supported. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Children's Privacy

EDA is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to EDA, contact us through the Support page so we can review and address the issue.

International Processing

Depending on where you use EDA and where our service providers operate, your information may be processed in countries other than your own. By using EDA, you understand that your information may be transferred to and processed in locations where privacy laws may differ from those in your jurisdiction.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date on this page and may provide additional notice where appropriate.

Contact

For privacy questions, data access requests, or account deletion requests, use the contact method listed on the EDA Support page.