Privacy Policy

Last Updated: 26.01.2026

Welcome to EndStep EDH ("we", "us", or "our"). Your privacy is critically important to us. This Privacy Policy describes how we collect, use, process, and protect your personal information when you use our mobile application and related services.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

1. Data Controller

The Data Controller for the information you provide is:
Luca Mezzanotte
Contact email: luca.mezzanotte@gmail.com

2. Information We Collect

2.1 Information You Provide (Account)

• Email Address: Required for account creation, secure login, password recovery, and critical service communications.
• Username / Nickname: Used to identify you publicly within game groups and leaderboards.
• Password: Stored exclusively in encrypted format (hashed). We do not have access to your raw password.

2.2 Game Data and User Generated Content

To provide the core features of the App (Tracker and Statistics), we collect:

• Deck lists (card names, commanders).
• Match history (results, duration, opponents, damage dealt).
• Group memberships and league data.

2.3 Technical and Usage Data

We automatically collect certain information when you access the App to ensure security and improve performance:

• IP address and access timestamps.
• Device type and operating system version.
• Crash logs and performance data.
• Camera Access: The App requires camera access solely for the QR Code scanning feature (used to join game groups). No photos or videos are stored on our servers or shared with third parties.
• Advertising Identifiers: We use device identifiers (such as Google Advertising ID or Apple IDFA) to serve personalized advertisements through the AdMob service.

3. How We Use Your Data

We process your data for the following purposes:

• Service Provision: To allow you to save decks to the cloud and sync them across devices.
• Statistical Analysis: To calculate win-rates, meta-game analysis, and group statistics (core features of the App).
• Security: To monitor for suspicious activity and prevent abuse or unauthorized access.
• Support: To respond to your technical support requests.

4. Data Sharing and Third Parties

We do not sell your personal data to third parties. We only share data with service providers necessary for the operation of the App:

• Hosting and Database: Netsons (for secure data storage).
• Scryfall API: The App queries Scryfall services to retrieve card images and text. No personal data is sent to Scryfall, but the interaction is subject to Scryfall's privacy policy.
• Google AdMob: For displaying banner advertisements. AdMob may collect usage data and device identifiers to show relevant ads.
• Firebase (Google): Used for push notifications (if applicable).

5. Your Rights (GDPR, CCPA, etc.)

Regardless of your location, we grant you the following rights:

• Access and Portability: You can request a copy of your personal and game data.
• Rectification: You can modify your profile and decks at any time via the App.
• Erasure (Right to be Forgotten): You can request the complete deletion of your account and all associated data by sending an email to luca.mezzanotte@gmail.com.
• Withdraw Consent: You can withdraw your consent to data processing by deleting your account.

6. Data Security

We implement reasonable security measures (such as HTTPS encryption in transit and password hashing at rest) to protect your data. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy (COPPA and GDPR-K)

The App is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you believe we have collected data from a child, please contact us immediately for removal.

8. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page or via a notification within the App.