Privacy Policy
Last updated: August 27, 2026
What we collect.
- Without an account: nothing that identifies you. Simulations run in your browser. If you choose to create a share link, the run configuration you shared is stored.
- With an account: your email address, and any decks, logged games, and settings you save.
- If you support us: a Stripe customer identifier and your subscription status. Payment card details never touch our servers — Stripe handles payment entirely.
How your content is used. Saved decks and logged games are used to operate the service and, in aggregated and de-identified form, to measure and improve the accuracy of the simulator. This is the point of the calibration page: comparing what the model predicted against what actually happened is how the tool gets better. Aggregate statistics may be published; your individual decks and games are not.
What we do not do. We do not sell your data. We do not serve advertising. We do not share your decks or logged games with third parties.
Service providers. Supabase (database and authentication), Vercel (hosting), Stripe (payments), Scryfall (card data). Each processes data only to provide its service.
Analytics. EDHbots does not use third-party analytics or advertising trackers.
Cookies. EDHbots uses cookies that are necessary for the site to work — keeping you signed in, and remembering settings you have chosen. We do not use advertising or cross-site tracking cookies. Stripe sets cookies on its own checkout and billing pages for fraud prevention, governed by Stripe's privacy policy.
Your choices. You can export or delete your decks and logged games at any time from your account, and you can delete your account entirely. Deleting your account removes your saved decks, logged games, and email address. Aggregated calibration statistics already published are not reversible, because they contain no individual data.
Retention. Your saved decks, logged games, and simulation runs are kept for as long as your account exists. On the free plan, the tracker displays the last 12 months and run history displays the most recent 5 runs; older entries are retained, not deleted, and existing share links keep working. Supporters see full history. Deleting your account removes your content, and deleted content is removed from backups within 30 days.
Your privacy rights. Wherever you live, you can request a copy of your data, correction of it, or its deletion, using the account controls or by emailing james@nimblo.ai. We do not sell personal information and we do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
Where data is held. Data is stored in the United States by our service providers.
Where we operate. EDHbots is operated from the United States and intended for users in the United States. If you access it from elsewhere, your data will be processed in the United States.
Children. EDHbots is not directed at children under 13 and we do not knowingly collect their information.
Changes. Material changes will be noted here with a revised date.
Contact: james@nimblo.ai