Summary
cEDH.online is a reference site, and you can read all of it without an account. If you choose to sign in with Discord, to save events, get a weekly email or keep a record of your games, we keep what each of those needs. Google Analytics runs only if you allow it, on the banner you see on your first visit, and nothing goes to Google before you choose. Apart from an account you choose to make, the only personal data we hold is whatever you put in an email to us.
What we collect
If you email us. We get your name, your email address and whatever you write, and we use them to reply to you. Your message sits in our mailbox like any other email.
If you sign in with Discord. Discord tells us your Discord user ID, your display name, your avatar and your email address, with whether Discord has verified it. We keep those, apart from an email address Discord hasn’t verified, along with your Discord username, the events you save and the email settings you choose. Your password, messages, servers and friends stay with Discord.
We use your email address only to send the weekly email if you switch it on, and we record when you switched it on. You can switch it off on your account page, or from the link at the foot of every email even when you’re signed out.
The weekly email. It goes out on Sunday evenings, if you’ve switched it on, from alerts@cedh.online through Hostinger’s mail service, which handles it under its own privacy policy.
Your games. If you use the Game Tracker, we keep the games you log. That’s the date, your commander, your seat, the result, how the game ended, your mulligans and the mana sources in the hand you kept. It also holds anything else you add. That can be a link to your decklist on Moxfield or Archidekt, your opponents’ commanders and Discord usernames, the cards you name as most valuable, and your notes.
To suggest and check card names, our server sends just the text you’ve typed to Scryfall, a public Magic card database. Only you can see your games, your decklist link and the usernames you type.
If you switch it on in the Game Tracker’s settings, your games also count towards the site’s statistics, which anyone can see on the game statistics page. It’s off until you do, and you can switch it off again at any time. Those are anonymous totals across every reader who shares, such as win rates by seat and by commander. They appear only after at least five readers share, and they count only games at least a week old. A commander, card or seat is listed only after it’s in games from three or more readers.
The administrator sees how many games each account has logged, and can leave a game or an account out of those totals if it would distort them. If you type someone else’s username, that’s their Discord name in your record of your own game, which they can ask us to remove.
A public profile, if you want one. It’s off until you switch it on in the Game Tracker. Then a page at cedh.online/players/ and your Discord username shows your Discord name and picture, and the Players page lists it. The page shows your own totals from the games you log yourself: win rate, seats, commanders, how you win and your most valuable cards. Your picture on it loads from Discord’s servers, so Discord can see that a visitor’s browser asked for it. When someone shares its link, the preview shows your name, your headline figures and a picture we draw for it from your Discord picture and those figures. We keep that picture on our server until your profile changes. Search engines are asked not to index the page, and switching it off removes the page and the picture at once.
Comparisons, and your record against another player. While your profile is on, anyone can set it beside another public profile at an address like cedh.online/players/you/vs/them/. A comparison shows only what the two profiles already show. A second switch adds your record against the other player, and it’s off until you turn it on. It shows how many of the games you logged name them in the pod, how many of the games they logged name you, and who won those. That second count is from their log, not yours. It shows only when the other player has switched it on too, and it’s counts only, with no notes and nobody else from the pod. A game counts a week after it’s logged, and only if it was logged after the player it names took that username here. Switching it off, or your profile off, removes it at once.
TopDeck.gg. If you link your TopDeck.gg profile, each morning we ask TopDeck.gg’s public tournament data for the tables that profile sat at, and add them to your tracker. We keep the TopDeck.gg profile you linked, the date it was last read, and the tournament games it brought in.
From TopDeck.gg we take each table’s seats, commanders, winner and the name each player uses on TopDeck.gg. For each tournament we take its name, date, how many played, where you finished and the size of the top cut. A table where you registered no decklist comes in without your commander. From those tables we also work out an Elo rating for tournament play. Everyone at the tables gets one, so beating a strong player counts for more, but a player who isn’t a reader here is kept only as a scrambled code made from their TopDeck.gg id, with their rating and number of games. We could match a code back to an id we already knew, so we treat these as personal data, and we never show or name them. Your own rating, and how it moved after each tournament, shows in your results, and on your profile if you show your TopDeck.gg games there. The game statistics page shows only how readers’ ratings spread, in bands of at least three readers, once ten readers who show their TopDeck.gg games have one. You can add notes to an imported game, and like all notes, only you see them. Your opponents’ TopDeck.gg names are for you alone: they show only in your own results, never on a public page, and the site’s administrator doesn’t see them. They’re names those players already publish on TopDeck.gg, and they go when you delete the game or your account. Imported games stay out of the site’s statistics and your record against other players. A link can’t prove the profile is yours, so imported games are off your public profile too, unless you switch them on there. Then your profile gets a TopDeck.gg section of its own, kept apart from the games you log. It has your totals, seats, commanders and form month by month from those games, your tournaments (each one’s name, date, field, your finish and record), and a link to the TopDeck.gg profile you linked, saying you linked it yourself. A comparison of your profile with another shows that section too. Your opponents stay in your own results. Switching it off, your profile off, or unlinking removes it at once. Unlinking stops the imports. The games already imported stay until you delete them.
Server logs. Our host, Hostinger, records the usual web-server information for every request: IP address, the page requested, the time, and the browser’s user-agent string. Every website does this, and it is used to keep the site running and to investigate abuse. Hostinger holds these logs under its own privacy policy, which doesn’t say how long it keeps them, and they stay with Hostinger.
Search Console. We use Google Search Console to see which search queries bring people here. It reports only aggregate figures, such as search terms, impressions and clicks, and it sets no cookies here.
Google Analytics. We’d like to see which pages get read and roughly how many people read them, so the site can use Google Analytics, through the Site Kit plugin. It only loads if you choose “Allow analytics” on the banner you see on your first visit. Until you choose, and if you choose “No thanks”, nothing is sent to Google and no analytics cookie is set.
If you allow it, Google receives the address of each page you read, your browser’s technical details and your IP address. It also sets its analytics cookies, which can last for up to two years. We see only totals, and advertising features stay off. What Google does with the data is governed by Google’s own privacy policy.
You can change your mind whenever you like, and it takes effect from the next page: Change your analytics choice.
Why we use it
The law asks us to say what each kind of data is for, and the lawful basis we rely on for it.
| What it’s for | Lawful basis |
|---|---|
| Your account, saved events and the Game Tracker, TopDeck.gg imports included | Contract: it’s the service you signed in for |
| The weekly email | Consent, given when you switch it on |
| Your public profile, your TopDeck.gg games on it, your record against other players on a comparison, and sharing your games with the site’s statistics | Consent, given when you switch each one on |
| Google Analytics | Consent, given on the banner |
| Replying to your emails | Legitimate interests: answering what you asked |
| Server logs, security and protecting the sign-in | Legitimate interests: keeping the site running and safe from abuse |
Where we rely on consent, you can withdraw it at any time, and that doesn’t affect what happened before.
Where your data goes
Some of the services above are run from outside the UK, mostly from the United States. Discord handles signing in, and Google runs Search Console and, if you allow it, Analytics. YouTube serves the thumbnails and the videos you play, and Scryfall checks the card names you type, or paste into a deck tool. Hostinger hosts the site and the weekly email.
Each of them says in its own privacy policy where it keeps data and how it protects data that leaves the UK. The safeguards a provider may rely on include the UK Extension to the EU-US Data Privacy Framework. They also include the UK’s International Data Transfer Agreement and the UK’s addendum to the EU’s standard contractual clauses.
Advertising and passwords
We don’t run advertising or set advertising cookies, and we don’t sell, rent or share your data. Accounts are optional, and signing in goes through Discord, so your password stays with Discord.
Cookies
Until you answer the banner, the site sets no cookies while you’re reading. After that, these are the things that get stored:
- Your analytics choice. Whichever button you press, a cookie called cedh_consent keeps your answer for 180 days, so the banner doesn’t ask again. A second cookie, lasting 30 days, passes the same answer to the rest of the site. Neither holds anything about you.
- Google Analytics, only if you allow it, as described above.
- Your theme choice. If you switch between light and dark, your browser stores that preference so the site remembers it. It stays on your device.
- A decklist you paste. If you paste a decklist into a deck tool, the card names are sent to Scryfall to look them up, and the list is kept in your browser tab until you close it. If you give a Moxfield deck link instead, our server fetches that public deck from Moxfield, keeps it for ten minutes, and sends nothing about you.
- Signing in. If you sign in, WordPress sets a cookie that keeps you signed in for up to two weeks, and a second cookie lasting ten minutes protects the sign-in itself. A third holds your Discord username, and a fourth the address of your Discord picture, so the account button in the header can show them. Your picture loads from Discord’s servers, with no note of which page you’re on. Both last as long as the sign-in and go when you sign out. The same login cookies are set for the small number of people who edit the site.
Embedded content from other sites
Pages here link to other people’s material, and the pages that show videos show their YouTube thumbnails. Those thumbnails load from YouTube’s image server rather than being copied onto ours, which means YouTube can see that a request came from your browser.
The videos themselves don’t load until you click one, and when they do, they use YouTube’s no-cookie domain.
Once you follow a link to another site, that site’s own privacy policy covers what it collects.
How long we keep things
Emails you send us are kept for 12 months and then deleted, unless you’ve asked us to delete them sooner or the conversation is still going.
Your account, saved events, email settings and games are kept until you delete your account, which you can do yourself on your account page at any time. Deleting it removes all of them at once. You can delete a single game whenever you like.
Server logs are Hostinger’s, held under its policy rather than ours. Your analytics choice stays in your browser for 180 days.
Your rights
Under UK data protection law, these are your rights over your data:
- Access. You can ask what we hold about you, and get a copy.
- Correction. You can ask us to put right anything that’s wrong.
- Erasure. You can ask us to delete it.
- Restriction. You can ask us to stop using it for a while, say while a correction is checked.
- Objection. You can object to anything we do on the basis of legitimate interests, and we’ll stop unless there’s a strong reason we can’t.
- Portability. You can have your data in a form another service can read. The download on your account page is exactly that, a file of everything your account holds.
- Withdrawing consent. You can switch off the weekly email, your public profile, your TopDeck.gg games on it, your record against other players or sharing with the statistics, and change your analytics choice, at any time.
Email us and say what you want, and we’ll do it. If you have an account, your account page also lets you download everything it holds, or delete it, yourself.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator.
Who we are and how to reach us
The data controller for this site is Niall Sheffield, cedh.online.
You can write to us at hello@cedh.online, and the site’s address is https://cedh.online.
Changes to this notice
If this notice changes, the date below changes with it.
Last updated: 5 October 2026 (a decklist pasted into a deck tool). Before that, 4 October 2026 (analytics only if you allow it, why we use your data, where it goes, your rights, opt-in sharing and comparisons)