Privacy
Last updated: 25 September 2026
Project Upkeep is a personal tool for tracking a Magic: The Gathering collection and trading with friends. This explains what it stores and why.
What’s collected
- Your email address and a username — to sign you in and let friends find you.
- Your collection data — cards, quantities, conditions, and the physical locations (binders, boxes, decks) you record them in.
- Your friends, trade proposals, want list, and trade history.
- Any feedback you submit through the in-app form.
- Playtest games you choose to save to your account. Browser crash recovery and playtest preferences stay in that browser.
Shared playtest tables
If you create a playtest share, anyone signed in to Project Upkeep who has its link can see a read-only version of the table until the link expires or you stop sharing. Your library order and private notes are excluded. Your hand is hidden unless you choose to show it when creating or updating the share.
How it’s stored
Account data lives in a Supabase (PostgreSQL) database with row-level security. You can read your own data, friends’ tradable binders where permitted, and redacted playtest tables whose links you hold. Local playtest recovery and preferences stay in your browser. Passwords are handled by Supabase Auth and are never stored by the app directly.
Card data
Card names, images, prices, and set information come from Scryfall (scryfall.com). Prices shown are Scryfall’s estimates, for display only — the app does not value your collection or facilitate sales.
What’s not done
No third-party analytics, no advertising, no tracking pixels. Your data is never sold. The playtest links you create are readable by signed-in people who have the link; other data is shared only where the app describes it, such as tradable binders for friends. Cookies are used only to sign you in and keep your session secure.
Deleting your data
Delete your account any time from Settings — it removes your collection, locations, decks, want list, friendships, and feedback immediately. One thing survives on purpose: a friend’s own copy of a trade you completed with them, with your identity removed from it, so closing your account cannot erase their record of what they own. Trouble with the form, or a question about any of this: email projectupkeepapp@gmail.com.
Contact
Questions about your data: projectupkeepapp@gmail.com.