Privacy

MoxMind keeps what it needs to run your account: your sign-in identity, membership, and a record of the events you use. Device logins are stored as hashed tokens. We don't sell your data.

Payments are handled by Stripe, and sign-in can go through Google. You can disconnect devices from your account at any time.

To prevent abuse of free offers, we retain limited sign-up metadata such as a normalized form of your email address and the IP address used at sign-up.

Gameplay data

To power draft help and to build and improve our features, the MoxMind overlay records information about your Magic: The Gathering Arena Limited play. This includes the cards you see and pick and when you pick them, the decks you build and register, match and game results (including whether you were on the play or the draw and mulligan decisions), your account context such as time of day and in-game currency balances, and app usage and performance events. This data is tied to your MoxMind account.

Some of this information necessarily involves your opponents (for example, match outcomes and in-game events). We do not store other players' account names in identifiable form: opponent identifiers are replaced with a one-way hash before storage, so we can measure aggregate patterns without keeping a record of who your opponents are.

We use this data to provide and improve MoxMind's recommendations and services. We don't sell it.

The phone app

The iPhone and Android app reads card names from a photo you take or choose. That reading happens on the phone itself, with the operating system's own text recognition: the photo is never uploaded to us and we never store it. When you build a Sealed deck, what is sent is the list of card names you have checked and confirmed, not the picture. Camera and photo access are used for nothing else.

Card images shown beside a grade are loaded from Scryfall's public image service, so those requests go to Scryfall rather than to us.

Website analytics

The website may use Google Analytics to count page views, so we know which pages are read and which are not. What it sends is the page you are on, its title and where you came from, plus what Google works out from the request itself: country, browser, device. It is never sent your email, your account, or anything about a draft, and we do not use it for advertising.

If your browser sends “Do Not Track”, no analytics script is loaded for you at all: not loaded and told to behave, simply not loaded. The overlay and the phone app carry no analytics of this kind; what they record is described above.

Closing your account

You can close your account yourself, without asking us: in the app, under Account → Close your account; on the site, at the bottom of your account page.

Closing cancels your subscription, signs out every device, and removes what identifies you: your email address, your name, your password, and your payment customer reference. The address is released, so it can be used to sign up again. What is left behind are the records of play and credits, kept as anonymous rows that no longer point at a person, which is how aggregate figures stay honest without keeping you in them. Closing cannot be undone, and credits you have left are not refunded.

If you would rather every row was erased outright, email us and we will do that instead.

Contact

Questions about your data? Email support@moxmind.com.