Privacy Policy
Effective date 2026-09-06
The Black Grimoire is a service that does not require an account to use and provides no persistent server-side profile tied to a visitor. There are no tracking cookies and no third-party analytics scripts on this site (page views are counted by a self-hosted, cookieless Umami instance that stores no IP addresses or personal identifiers), and no data is sold or shared with advertisers.
Collection data
If you import a ManaBox or Arena collection CSV on the Collection page, it is parsed and stored only in your browser's localStorage. When you build a deck from it, the list of owned card names is sent with that one request so the engine can restrict the pool; it is not stored on the server, and clearing your browser data removes the collection completely.
Deck builds
Commander name, cards you list as owned, and build preferences are sent to the build service to generate a deck and are not linked to any personal identity. Completed builds are not stored against a user account, since there is no account system; if a deck is saved to the public catalogue it appears without any identifying information about who requested it.
Server logs and rate limiting
Like most web services, requests are logged briefly at the server level, and the IP address of an incoming request is used to apply rate limits on the build and feedback endpoints so the site stays usable for everyone. These logs are not used for tracking or advertising and are not retained for analytics purposes.
Feedback and contact
Messages sent through the feedback widget or contact form are stored in the site database, hosted on Neon Postgres, and forwarded to the developer. An email address is only stored if you provide one, and is only used to reply to you — it is never added to a mailing list or shared with a third party.
Your rights
Because collection data never leaves your browser, there is nothing to request or delete on the server for that data. For feedback or contact submissions that include an email address, you can request deletion at any time through the contact form, and the request will be honored.
Children's privacy
This site is not directed at children and does not knowingly collect information from anyone under the age required to consent to data processing in their jurisdiction.
Future changes
Limited, non-intrusive advertising may be added later to support hosting costs. This policy will be updated first if that changes how data is collected, and the effective date at the top of this page will move forward when it does.