SWU Forge beta
Browse Workshop Suspended

Privacy Policy

Last Updated: March 16, 2026

1. Information We Collect

When using SWU Forge ("the Service"), we may collect the following information:

  • Account Information: When you sign in via Google or Discord OAuth, we receive your user ID, display name, email address, and profile image as provided by the OAuth provider.
  • Deck Data: Deck configurations, sideboard lists, and folder structures you create and save.
  • Search Queries: Natural language search queries submitted through the AI-powered search feature, along with the filters generated and result counts.
  • Technical Data: Standard server logs including IP address, browser type, and request timestamps.

2. How We Use Your Information

We use collected information to:

  • Authenticate your account and manage user sessions
  • Store and display your saved decks and folders
  • Enable deck sharing and publishing features
  • Improve AI search quality and accuracy
  • Monitor and maintain the Service's performance and security
  • Enforce rate limits and prevent abuse

3. Data Storage

Account data, saved decks, and search logs are stored in a PostgreSQL database hosted on Railway. Deck import data (from file uploads or URL imports) is processed in memory and not stored beyond the resulting deck configuration. Browser session data and temporary deck state may be stored in your browser's sessionStorage or localStorage.

4. Data Sharing

We do not sell, trade, or rent your personal information. Your information may be shared in the following circumstances:

  • Published Decks: When you publish a deck, its contents and your display name become publicly accessible via share links and share images.
  • AI Search Processing: Search queries are sent to Anthropic's Claude API for processing. Queries are not associated with your personal identity when sent to the API.
  • Deck Imports: When importing from external sources (SWUDB, Melee.gg), our server fetches data from those services on your behalf. We do not share your information with those services.
  • Legal Requirements: We may disclose information when required by law or in response to valid legal requests.

5. Cookies and Local Storage

The Service uses cookies to maintain authentication sessions. We also use browser localStorage to save your display preferences (such as theme and image quality settings) and sessionStorage for temporary deck state during imports. We do not use third-party tracking cookies or advertising cookies.

6. Third-Party Services

The Service integrates with the following third-party services:

  • Google OAuth and Discord OAuth for authentication, subject to their respective privacy policies
  • Anthropic Claude API for AI-powered card search
  • Cloudflare for CDN and image delivery
  • Railway for application and database hosting

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

7. Data Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS) and secure authentication flows. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

8. Your Rights

You have the right to:

  • Access your stored data, including saved decks and account information
  • Delete your decks and published content at any time through the Service
  • Request deletion of your account and all associated data by contacting us
  • Unpublish previously shared decks to remove public access

9. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, you may reach us through the Service or via our community channels.