Privacy

What the app downloads

Each of these is a reference download: data in, nothing about you out. Every one fails softly, so the app keeps working without it.

• Scryfall: the card database, once, and card images one at a time as the dashboard shows them. A request for a picture names that card, so Scryfall can see which cards a copy has shown, never when, against whom or with what result.
• MTGOFormatData: the archetype definitions that name an opponent's deck.
• MTG_decklistcache and mtgo.com: public tournament results for the Field page, in the formats you follow.
• TopDeck.gg: its events, only if you add a free key of your own in Settings. The request carries that key and nothing else of yours.
• GitHub: the version check, once a day and each time the app starts. It carries what any web request does, your IP address and the app's version among it, and nothing about your games. Check for updates in Settings turns it off.

Nothing about a user's games is sent to any of these, with the one exception Scryfall's line names.

The one call you ask for

A written guide or report can come from a prompt you copy into any assistant yourself, in which case the app sends nothing. If instead you set a Claude key of your own in Settings and press a generate button, the app sends that report's prompt to Anthropic's API under your key, shows the cost it measured, and stores the answer in your database. No key, no call; no press, no call. Nothing ever calls on a schedule.

Where your data lives

Your match history is one database file in a folder of its own; Settings shows the folder and opens it. A key you add is kept in Windows Credential Manager or your system keyring, or in a settings file in your home folder when there is no keyring to use; it is never in the database. Uninstalling the app leaves the folder where it is, so reinstalling picks up where you left off; delete it yourself to remove everything.

This website

This site is static files served by a Cloudflare Worker, and one small script, behind the Download buttons and in front of the English home and privacy pages. It sets no cookie. Beyond the page itself it makes two requests. One is Cloudflare Web Analytics, a cookieless count of page views that keeps no identifier of yours; it tells us how many people read this page, and nothing about who. The other happens only if your browser cannot reach the site: it may tell Cloudflare so, through Network Error Logging; that report says which page failed and from which network and country, and Cloudflare keeps no address of yours from it.

The Download buttons point at this site so that they always find the newest installer. When you press one, the script asks GitHub for the name of the newest release's installer; that request comes from Cloudflare and carries nothing of yours. It then sends your browser to that file on GitHub Releases, and the download itself comes from GitHub, which receives what any web request carries, your IP address and browser among it. The script keeps no log, sets no cookie and stores nothing. If GitHub cannot be reached, it sends you to the releases page instead.

The English home and privacy pages also pass through the script, to choose a language. Cloudflare already works out a country from the IP address of every request it serves; the script reads that country, not the address. If it is Brazil, and you did not come from another page of this site, the script sends you to the same page in Portuguese. Clicking English on a Portuguese page does not send you back, and the Portuguese pages are never redirected. To know whether you came from this site, your browser now tells it which page you came from when you move between its pages, and still tells no other site anything. The country is used for that one decision and nothing else; the script keeps no log of it and stores nothing.

Contact

contact@senseitop.com. For a vulnerability, read SECURITY.md first.