Scryfall · Privacy & Data

Scryfall privacy & data

Read from Scryfall's own page on 2026-11-10. 18 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

The page states nothing on this.

Data categories

category: device
Your browser version (Safari, Firefox, Chrome, etc)
Read from Scryfall's own page on 2026-11-10
category: device
Your operating system (macOS, Windows, iPhone, etc)
Read from Scryfall's own page on 2026-11-10
category: location
Your country
Read from Scryfall's own page on 2026-11-10
category: behavioral
we keep track of which buttons and links people click to get around on the site and how often they come back
Read from Scryfall's own page on 2026-11-10
category: identifying
a username and email address
Read from Scryfall's own page on 2026-11-10
category: contact
Your email address is private; we will never share your account email with anyone.
Read from Scryfall's own page on 2026-11-10
category: financial
such as debit or credit card details
Read from Scryfall's own page on 2026-11-10

Purposes

purpose: operate Scryfall and provide paid services
Any information we do collect is only used to operate Scryfall, provide paid services, and make informed decisions about how to improve our products.
Read from Scryfall's own page on 2026-11-10
purpose: account services
Scryfall uses this information to provide you with account services and communicate changes made to your account.
Read from Scryfall's own page on 2026-11-10
purpose: troubleshooting bot issues
In order to troubleshoot bot issues, Scryfall administrators are able to see messages sent to our bots for a period of less than 24 hours.
Read from Scryfall's own page on 2026-11-10

Retention

scope: bot messagesperiod: less than 24 hours
Scryfall administrators are able to see messages sent to our bots for a period of less than 24 hours. After this time, Scryfall discards this data and does not permanently store bot messages.
Read from Scryfall's own page on 2026-11-10
scope: deleted accounts
once you delete an account, all of that information will be unrecoverable, even by Scryfall administrators.
Read from Scryfall's own page on 2026-11-10

Residency

region: United States
we store account and system data in the United States, using Heroku Postgres
Read from Scryfall's own page on 2026-11-10

International transfers

The page states nothing on this.

Subprocessors

Data processing agreement

Deletion

route: account deletion via settings link
You can delete your Scryfall account at any time. If you do, Scryfall will remove all information we have about you, including your account details, your settings, your comments, and your decks.
Read from Scryfall's own page on 2026-11-10

Data subject rights

right: data export
You can download an archive of your account data at any time in your Scryfall settings.
Read from Scryfall's own page on 2026-11-10
right: account deletion
You can delete your Scryfall account at any time.
Read from Scryfall's own page on 2026-11-10
right: opt-out of Google Analytics
You have the option to opt-out of Google Analytics using their browser extension or any of the available content blocking plugins for your platform.
Read from Scryfall's own page on 2026-11-10

Sale or sharing

stance: prohibited
We never sell or trade this information to any other company.
Read from Scryfall's own page on 2026-11-10

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page