Privacy Policy

Introduction

Welcome to DeckStir, operated by Sleeved AI, LLC ("we," "us," "our," or "Company"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains:

• What information we collect from you
• How we use your information
• How we share your information
• Your rights and choices regarding your information
• How we protect your information

By using DeckStir (https://deckstir.app), you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

1. Information We Collect

We collect several types of information from and about users of DeckStir.

1.1 Information You Provide Directly

Account Information:

• Email address
• Username
• Password (encrypted)
• Display name (optional)
• Profile picture (optional)
• Date of account creation

Deck and Gameplay Data:

• Deck lists (card names, quantities, commanders)
• Deck names and descriptions
• Deck tags and categories
• Goldfish simulation data (gameplay sequences, outcomes)
• Mulligan decisions and preferences
• Deck-building preferences and settings
• Analysis results and recommendations you generate
• Saved searches and filters

Payment Information:

If you subscribe to DeckStir Premium, we collect payment method details (processed securely by our payment processor), billing address, transaction history, and subscription status. Note: We do not directly store your full credit card information. Payment processing is handled by secure third-party payment processors that comply with PCI-DSS standards.

Communications:

• Email correspondence
• Support tickets and inquiries
• Feedback and survey responses
• Bug reports and feature requests

1.2 Information Collected Automatically

Usage Data:

• Pages visited and features used
• Time and duration of visits
• Links clicked and navigation paths
• Search queries and filters applied
• Device type and operating system
• Browser type and version
• Screen resolution and device settings
• Referring website or source
• IP address and general location (city/state level)
• Date and time of access

1.3 Information from Third Parties

Card Data: We obtain Magic: The Gathering card data from third-party sources including Scryfall API (card information, images, prices) and EDHREC (Commander deck statistics and trends).

Social Login: If you sign in using social media (Google, Discord, etc.), we receive profile information from the social platform, email address, and authentication tokens.

2. How We Use Your Information

We use the information we collect for various purposes related to providing and improving DeckStir.

2.1 To Provide and Maintain the Service

• Account Management: Create, maintain, and secure your account
• Service Delivery: Provide deck analysis, goldfish simulations, mulligan recommendations, and deck-building tools
• Personalization: Customize your experience based on your preferences and usage patterns
• Authentication: Verify your identity and manage your login sessions
• Customer Support: Respond to your inquiries, support requests, and feedback
• Payments: Process subscription payments and manage billing

2.2 To Improve and Develop the Service

• AI Training and Improvement: Train and improve our AI algorithms for better deck analysis and recommendations
• Feature Development: Develop new features and improve existing functionality
• Performance Optimization: Analyze usage patterns to optimize performance and user experience
• Research: Conduct research and analysis on deck building trends and Commander metagame

2.3 To Communicate with You

• Service Announcements: Notify you about changes to the Service, new features, or updates
• Transactional Emails: Send account-related emails (password resets, payment confirmations, etc.)
• Marketing Communications: Send promotional emails about new features, tips, or special offers (with your consent)

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us at [email protected].

2.4 For Security and Legal Compliance

• Security: Detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity
• Legal Compliance: Comply with legal obligations, court orders, and regulatory requirements
• Enforcement: Enforce our Terms of Service and other policies
• Protection: Protect the rights, property, and safety of DeckStir, our users, and the public

3. How We Share Your Information

We do not sell your personal information to third parties.

We share your information only in the limited circumstances described below:

3.1 Service Providers and Business Partners

We share information with third-party service providers who perform services on our behalf:

These service providers have access to your information only to perform services on our behalf and are contractually obligated to protect your information.

3.2 Legal and Safety Reasons

We may disclose your information when we believe it is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service or other agreements
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of DeckStir, our users, or the public

3.3 Business Transfers

If Sleeved AI, LLC is involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. For example: "40% of Commander decks on DeckStir include Sol Ring" or "Average mana curves for Simic commanders." This information does not identify individual users.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

5. Your Privacy Rights and Choices

Depending on your location, you may have certain rights regarding your personal information.

5.1 All Users

• Access: View your personal data in account settings
• Correction: Update inaccurate information
• Deletion: Delete your account and associated data
• Export: Download your deck lists and collection data

5.2 EEA, UK, and Swiss Residents (GDPR)

Additional rights include data portability, restriction of processing, objection to processing, and filing complaints with data protection authorities. We process your personal information based on consent, contract performance, legitimate interests, and legal obligations.

5.3 California Residents (CCPA/CPRA)

You have the right to know, delete, and opt-out. We do not sell personal information. You have the right to non-discrimination for exercising your CCPA rights.

5.4 How to Exercise Your Rights

To exercise your privacy rights:

• Email us at: [email protected]
• Subject line: "Privacy Rights Request"
• Include: Your name, email address, and specific request

We will respond within 30-45 days depending on jurisdiction.

6. Cookie Policy

6.1 Types of Cookies We Use

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: TLS/SSL encryption for data in transit, encryption at rest
• Password Hashing: Industry-standard bcrypt hashing for stored passwords
• Access Controls: Role-based access controls and authentication requirements
• Secure Hosting: Cloud infrastructure with security certifications
• Monitoring: Continuous monitoring for security threats and anomalies

Your Responsibility: Account security is a shared responsibility. You should choose a strong, unique password, keep your login credentials confidential, log out of shared devices, and notify us immediately if you suspect unauthorized access.

8. International Data Transfers

Sleeved AI, LLC is based in the United States. If you access DeckStir from outside the United States, your information will be transferred to, stored, and processed in the United States.

For Users in the EEA, UK, or Switzerland: We transfer personal data using appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Children's Privacy

DeckStir is not directed to children under 13 years of age (or 16 in the EEA/UK). We do not knowingly collect personal information from children under these ages.

If we become aware that we have collected personal information from a child without verified parental consent, we will delete the information as quickly as possible. If you are a parent or guardian and believe your child has provided personal information, please contact us immediately at [email protected].

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you by email or through a prominent notice on DeckStir
• Provide at least 30 days' notice before changes take effect (for material changes)

Your continued use of DeckStir after the effective date constitutes your acceptance of the changes.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Sleeved AI, LLC
Email: [email protected]
Website: https://deckstir.app

We will respond to your inquiry within 30 days.

Last Updated: February 27, 2026 • Version 1.0
© 2026 Sleeved AI, LLC. All rights reserved.