Privacy Policy

Effective October 28, 2026 (return-reminder emails added when that feature opens)

SnapKeep (snapkeep.gg) is run by SnapKeep LLC, a North Carolina limited liability company ("SnapKeep", "we", "us"). This policy explains what we collect, why, and the choices you have. Questions or requests: [email protected].

What we collect

If you use the site without signing in, we don't collect personal information. Decks, notes, collection and layout you create are saved only in your own browser's storage, on your device. Clearing your browser data removes them.

If you sign in, we collect:

• From Discord or Google, when you sign in: your account ID with that service, your name or username, your email address, and your profile picture link. We never see or store your Discord or Google password.
• If you sign in with an email link: your email address, and a short-lived code we keep only as a one-way hash so the link works once and expires after 15 minutes.
• Profile details you add: a display name and, if you choose, your Magic: The Gathering Online and MTG Arena usernames.
• Content you save: decklists, sideboard plans, notes, collection, wishlist, borrowed and lent cards (including the friend's name you type) and settings.
• Return reminders: if you set a reminder to return borrowed cards or to ask for lent cards back, we store the reminder message (the friend's name and the card names) and the time you chose, and email it to your account's email address at that time.
• Match summaries you upload: when you upload your own MTG Arena or Magic Online log files, your browser reads them on your device and sends us a short summary of each match, not the log itself. If you ask the site to remember a log folder, the permission is stored only in your browser, and the folder is read only when you press Sync. Each summary holds the date, format, event type and best-of, your ladder rank at the time, your deck's name and card list, the cards your opponent was seen playing and our guess at their archetype, game-by-game results (win or loss, play or draw, mulligans, turns), and your opponent's in-game screen name. The opponent's screen name is shown only to you, is never included in shared data, and an opponent can ask us to remove it at [email protected].
• Paper matches you enter: the date, event, round, format, your deck, your opponent's deck and name if you add them, and each game's result. These are kept private to you and never shared.
• Card scans: if you use the card scanner, the pictures you choose to scan are sent to Anthropic to read the cards in them (see below). We keep the card list it returns, the changes you make to it, and small low-resolution copies of the pictures, so you can reopen a scan and see where each card was. We keep your latest 50 scans. You can delete any scan, and deleting your account deletes them all. Please don't scan pictures that show people or personal details.
• Your choices: whether each deck is public or private, and whether your uploaded matches are shared with the site's anonymous metagame statistics.
• A sign-in cookie: one cookie that keeps you signed in. It contains a random value, not your personal details, and expires after 30 days or when you sign out.

If you send feedback, we store your message, the page you sent it from, your browser type and approximate country, and the name and email address if you give them.

Automatically: our host, Cloudflare, processes your IP address and request details to deliver the site and protect it from abuse. We don't use analytics, advertising cookies or tracking pixels.

How we use it

• To run your account and show you your own saved content on any device.
• To show content you have chosen to make public, under the display name you choose.
• Shared match data. The first time you upload matches, we ask whether to share them. Sharing is selected by default, and you can choose not to share and still upload. If you share, your matches are included, without your name, your account, or your opponent's name, in aggregate statistics such as metagame and win-rate pages. A group of matches is shown only when it includes enough different players and matches that no individual can be singled out, and no single player can make up more than a small share of any result. Direct challenges and practice matches between friends, Limited games, paper matches you type in, and matches you mark "leave out" are never shared. You can turn sharing off at any time on your account page or the upload page; from then on none of your matches are used.
• To answer feedback, fix bugs and keep the site secure.

We do not sell your personal information, do not share it for advertising, and do not use it to train AI models.

Google user data

When you sign in with Google, SnapKeep asks Google only for basic sign-in information (the "openid", "email" and "profile" permissions). We receive your Google account ID, your name, your email address and a link to your profile picture. We use them only to sign you in, to link your Google sign-in to your SnapKeep account, and to show your name and picture on your own account page. We don't ask for access to Gmail, Drive, Contacts, Calendar or any other Google service, and we never see your Google password.

We don't sell this information, use it for advertising, use it to train AI models, or share it with anyone, except Cloudflare, which stores it for us. SnapKeep's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove SnapKeep's access at any time in your Google Account (Security, then "Your connections to third-party apps & services"). Deleting your SnapKeep account deletes the Google details we stored.

Legal bases (for visitors in the EU, EEA and UK)

We process account data to provide the service you asked for (contract), shared match statistics on the basis of the choice you make when you first upload (your consent, which you can withdraw at any time by turning sharing off), and security and feedback on the basis of our legitimate interest in running a safe, working site.

Who processes data for us

• Cloudflare, Inc.: hosting, database and storage, and sending the one-time sign-in link if you choose to sign in by email, and return-reminder emails you ask for (United States).
• Discord Inc. and Google LLC: only when you choose to sign in with them; their own privacy policies apply to your accounts there.
• Anthropic, PBC: only when you use the card scanner. It reads the pictures you scan and returns the card list (United States). Anthropic does not use pictures sent to it this way to train its models, and keeps them only for a limited time under its commercial terms.
• Scryfall and Google Fonts: card images and fonts load directly from their servers, so your browser connects to them and they receive your IP address. We send them nothing about your account.

We may disclose information if required by law, or to protect the rights and safety of our users or SnapKeep. If SnapKeep is ever sold or merged, user data would transfer under this policy and we would notify you first.

How long we keep it

Account data is kept until you delete your account. When you delete it, your data is removed from the live database immediately and from backups within 30 days. Feedback is kept for up to two years. Server logs are kept by Cloudflare under its own retention periods.

Your choices and rights

From your account page you can:

• Download a copy of all your data (JSON file).
• Edit your profile and content.
• Make content private again, turn off match sharing, leave out single matches, or delete uploaded matches.
• Delete your account and all of its data.

You can also email [email protected] to ask what we hold about you, or to correct or delete it. We'll answer within 30 days. Depending on where you live (for example California, other US states, the EU or UK), you may have further rights, including to complain to your local data protection authority. We won't treat you differently for using these rights.

Children

SnapKeep is not for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, contact us and we'll delete it.

Security

Data is sent over encrypted connections (HTTPS), sign-in cookies can't be read by page scripts, and access to the database is limited to SnapKeep. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.

International visitors

SnapKeep is run from the United States and data is stored in the US. Using the site means your data is processed there.

Changes

If we change this policy in a way that matters, we'll post the new version with a new effective date and tell signed-in users on the site before it takes effect.

See also the Terms of Use.