Privacy Policy

Introduction

Mulligan Labs ("we," "us," or "our") operates the Mulligan Labs web application (mulligan-labs.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our service.

1. Information We Collect

Discord Profile Information

When you authenticate via Discord OAuth, we collect and store:

• Discord user ID
• Discord username
• Discord avatar URL
• Email address (if provided by Discord)

Game Data

We collect and store:

• Deck lists you create and edit
• Game state during multiplayer sessions
• Game replays and logs
• Player actions and game history

Usage Analytics

We may collect:

• Page views and navigation patterns
• Features used and game statistics
• Device and browser information
• IP address and access logs

2. How We Use Your Information

We use collected information to:

• Authenticate you and provide access to the service
• Display your profile and game history
• Enable multiplayer game functionality
• Store and manage your decks and game data
• Improve and optimize our service
• Detect and prevent abuse or fraud
• Comply with legal obligations

3. Data Storage and Infrastructure

Your data is stored on Cloudflare infrastructure, including:

• Cloudflare D1: Database for user accounts and game data
• Cloudflare KV: Cache for session data and frequently accessed information
• Cloudflare R2: Object storage for game replays

Cloudflare is bound by their privacy standards and terms of service. We recommend reviewing Cloudflare's Privacy Policy for additional details.

4. Third-Party Services

Discord

We use Discord OAuth for authentication. Discord collects and processes your information according to their Privacy Policy.

Scryfall

We use the Scryfall API to fetch Magic: The Gathering card data. Card images and data are retrieved from Scryfall. Please refer to Scryfall's terms for information on how they handle data.

Cloudflare

Beyond data storage, Cloudflare provides our CDN, DDoS protection, and web infrastructure. See their Privacy Policy for details.

5. Cookies and Local Storage

We use cookies and browser local storage to:

• Maintain your session and keep you logged in
• Store user preferences and settings
• Cache game state locally for faster performance
• Track basic usage patterns

You can clear cookies and local storage through your browser settings at any time. This may log you out and reset stored preferences.

6. Data Retention

We retain your personal information for as long as your account is active. After you request account deletion or abandon your account for an extended period, we may retain aggregated or anonymized data for statistical purposes, but will delete personal identifying information within a reasonable timeframe.

Game replays and historical data may be retained longer for integrity and analysis purposes, unless you request deletion.

7. Children's Privacy

Mulligan Labs is not intended for users under 13 years of age. By using our service, you represent that you are at least 13 years old. This aligns with Discord's Terms of Service and COPPA requirements. If we learn that a user is under 13, we will delete their account and associated personal information.

8. Your Privacy Rights

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Object to certain processing
• Withdraw consent

To exercise these rights, please contact us via our Discord server.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by updating the "Last updated" date and, when required, by requesting your consent.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us via our Discord server.