Legal, privacy & credits

Privacy & your data

Kiln stores only what it needs to run your account: your email address (so we can send a sign-in link and identify your account), the decks you save, and any decks you choose to publish to the community. We do not use passwords; sign-in is a one-time magic link. Our lawful basis for this processing is performance of our contract with you (providing the service) and, for the sign-in email, your request to access your account.

We share data only with the processors that make Kiln work: our database host (Supabase) and our email provider (Resend), which sends your sign-in links. Card data and images come from Scryfall. These providers may process data outside your country under standard contractual safeguards.

Your rights. You can access, correct, export, or delete your data at any time. Signed in, open the builder → Settings → “Your data & privacy” to download a machine-readable copy of your data or to delete your account. Deleting your account removes your profile and private saved decks; decks you contributed to the community are kept but anonymized (your identity and credit are removed), so the shared content remains useful to other players.

Prefer to ask us directly? Email privacy@thekiln.app and we'll action any access, correction, export, or deletion request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Wizards of the Coast Fan Content Policy

Kiln is unofficial Fan Content permitted under the Wizards of the Coast Fan Content Policy. It is not approved or endorsed by Wizards. Portions of Kiln are unofficial Fan Content. Magic: The Gathering, its card names, and card text are © Wizards of the Coast LLC.

Card data & images

Card data and images are provided by Scryfall. Card images and card text remain © Wizards of the Coast. Kiln is not produced by, endorsed by, or affiliated with Scryfall or Wizards of the Coast.