SwapsmithDeutsch
← Back to the planner

Privacy policy

In short: Swapsmith needs no account, sets no cookies, uses no tracking or analytics and currently shows no ads. Your browser loads card data from Scryfall and MTGJSON only with your consent.

1. Controller

Dominik Falkowski
Gladbacher Straße 511
41748 Viersen
Germany
Email: kontakt@swapsmith.org

We have not appointed a data protection officer because we are not legally required to.

2. Visiting the website and server log files

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. With every page request the server processes technically necessary data: IP address, date and time, requested address, amount of data transferred, status code, the previously visited page (referrer), and browser and operating system. This is needed to deliver the page and keep it secure, for example against attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is secure and stable operation. Log files are deleted after six weeks. STRATO stores IP addresses in the log files only in anonymized form: part of the address is replaced by a hash value before it is saved. We have a data processing agreement with our host under Art. 28 GDPR.

3. Card data from Scryfall and MTGJSON (only with consent)

For the planner to work, your browser requests data directly from these services:

With these requests, the services receive your IP address, information about your browser and operating system, and the content of the request: card names, searches and your deck’s card list. How long these services keep the data is outside our control.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give in the notice on your first visit. We are not aware of a certification under the EU-US Data Privacy Framework or any other safeguard under Art. 45 or 46 GDPR for these services. The transfer to the US is therefore based on your explicit consent under Art. 49(1)(a) GDPR. The risk: US authorities may access the data without you having effective legal remedies.

You can withdraw your consent at any time with effect for the future, here or via “Privacy settings” at the bottom of the start page. Without consent the planner can’t load any cards. All other content stays available.

4. Storage in your browser

Swapsmith sets no cookies. We store your choice from the notice, with its date, in your browser’s local storage (localStorage, entry “swapsmith-consent”). Otherwise we would have to ask you on every visit. This storage is strictly necessary for the service you requested (§ 25(2) no. 2 TDDDG). You can delete the entry in your browser at any time.

5. Links to stores and other sites

Swapsmith links to Cardmarket, TCGplayer and Scryfall. Your browser only opens the other site when you click a link, and from then on that site’s privacy policy applies. Links to Cardmarket may be affiliate links. They then contain an identifier that lets Cardmarket attribute a purchase to Swapsmith. We ourselves do not process any data about you in the process.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)). An email to us is enough.

You can also lodge a complaint with a data protection authority (Art. 77 GDPR), for example the one where you live or the one responsible for us: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

7. Other

You are not obliged to provide any data. A website can’t be visited without the technically necessary connection data, though. There is no automated decision-making under Art. 22 GDPR.

The German version of this policy is the authoritative one.

Last updated: November 2026