Guardian Digital Studios ("we", "us", or "our") operates Commander Index, accessible at commander-index.com. This Privacy Policy explains how we collect, use, and protect your information when you use our service. By using Commander Index, you agree to the practices described here.

Questions or concerns can be directed through our website at guardiandigitalstudios.com.

We collect information you provide directly when using the service:

• Account data. email address, username, and password (stored securely via Supabase Auth)
• Profile data. optional display information such as avatar, favorite cards, guild color theme, and tagline
• Deck and match data. deck lists, power scores, match results, and pod membership information you submit
• Community content. feature suggestions, challenge submissions, comments, and other content you post

Every feature of Commander Index is free. There is an optional paid Supporter tier which removes advertising and unlocks cosmetic options; it never gates functionality. We never see or store your payment details. Card information is collected and held entirely by Stripe, our payment processor. We store only your subscription status and Stripe's identifier for your customer record.

The mobile app can read a Magic card's printed name from a photograph, so you can add cards without typing them. It asks for camera access only when you choose to take a photo, and for photo library access only when you choose an existing one. Decline either and the rest of the app is unaffected. You can always add cards by name instead.

Photographs you scan are never uploaded, and we never receive them. The text is read on your own device using the operating system's built-in recognition. Apple's Vision framework on iOS, Google's ML Kit on Android. The image is discarded once it has been read and is not stored by the app, on our servers, or anywhere else. Nothing leaves your phone except the recognised card name, which is looked up against Scryfall's public card database in the same way that typing the name in would be.

An earlier version of the app uploaded scans to our servers for processing. That has been removed, the storage it used has been deleted, and no scans from it were retained.

We use the information we collect to:

• Provide and operate the Commander Index service
• Display your profile, decks, and match history to you and your pod members
• Generate leaderboards, win rate statistics, and community rankings
• Improve and develop new features based on community usage
• Respond to support requests or account issues

We do not sell your personal information to third parties.

Your data is stored using Supabase, a cloud database platform. Data is hosted on Supabase's infrastructure. By using Commander Index, you acknowledge that your data will be processed and stored by Supabase in accordance with their terms and privacy policy.

Commander Index integrates with the following third-party services:

• Scryfall API. used to look up Magic: The Gathering card data (card names, images, types, and prices). Scryfall receives card search queries but does not receive your account information.
• Google AdSense. used to display advertisements on the website. Google may collect usage data and set cookies in accordance with their own privacy policies. You can learn more at policies.google.com/privacy.
• Google AdMob. used to display a single banner advertisement in the mobile app. See section 7 below, which describes exactly what this does and does not do.
• Stripe. processes Supporter subscription payments. Stripe collects and stores your payment details; we do not. See stripe.com/privacy.
• Firebase Cloud Messaging. delivers push notifications to the mobile app, if you enable them. It receives a device token so notifications can reach your device. Notifications can be turned off in Settings, and the token is removed when you do.

The mobile app shows one banner advertisement, anchored above the navigation bar. It never appears on the Play screen, which is the surface used during a game. Supporters see no advertising at all. On a Supporter's device the advertising SDK is never started.

Advertising in the app is not personalised. Every ad request is made with personalisation explicitly disabled, so no advertising identifier is shared for the purpose of targeting you, and no profile of you is built for advertising. This is a deliberate choice rather than a consequence of your settings, and it applies to everyone, everywhere.

Because of this, the app does not:

• ask for permission to track you across other apps and websites. There is no App Tracking Transparency prompt, because nothing tracks you
• sell or share personal information for cross-context behavioural advertising, as those terms are defined under California law and comparable US state laws
• use your decks, matches, pods, scores or profile to select advertising

Google still receives the technical information needed to serve and measure a non-personalised ad, such as coarse device and network characteristics. Their handling of it is described at policies.google.com/privacy.

If you are in the EEA, the UK or Switzerland, the app asks for your consent before requesting advertising, using Google's consent management platform. You can change that choice at any time from Settings → Ad privacy.

You can request deletion of your account and associated data at any time through the Settings page. If you encounter any issues, you can contact us through guardiandigitalstudios.com.

Deck data you have marked as public may be visible to other users. Making a deck private or deleting it removes it from public view.

Commander Index is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Commander Index after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, email hello@guardiandigitalstudios.com, or visit guardiandigitalstudios.com.