Privacy Policy
Last updated: March 2026
1. Information We Collect
When you create an account, we collect your name, email address, and password (stored securely via Supabase Auth). When you use the Service, we store deck data, simulation results, and usage information associated with your account.
2. How We Use Your Information
We use your information to provide and improve the Service, send account-related emails (confirmation, password reset), and communicate updates about Mana Lab. We do not sell your personal data to third parties.
3. Third-Party Services
Mana Lab uses the following third-party services:
- Supabase — authentication and database hosting
- Vercel — application hosting and deployment
- Scryfall — card data and images (public API, no personal data shared)
- Resend — transactional email delivery
- Stripe — payment processing (when billing is active)
4. Data Storage and Security
Your data is stored in Supabase's managed PostgreSQL database. Passwords are hashed and never stored in plaintext. We use industry-standard security practices, but no method of transmission or storage is 100% secure.
5. Cookies and Local Storage
We use cookies and browser local storage to maintain your authentication session and theme preference. We do not use tracking or advertising cookies.
6. Your Rights
You may request deletion of your account and associated data at any time by emailing support@skolara.dev. We will process deletion requests within 30 days.
7. Children's Privacy
Mana Lab is not directed at children under 13. We do not knowingly collect personal information from children under 13.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email. Continued use of the Service after changes constitutes acceptance.
9. Contact
Privacy questions or data requests: support@skolara.dev.