Privacy policy

Trolleri (trollerimtg.com) is run by FTRM DIGITAL AB, Västerås, Sweden, which is the data controller for everything described on this page.

For anything to do with your data, write to privacy@futurumdigital.se. You can also find us in our Discord, but please use the address for anything about your own data, so there is a record of it.

Your email address, and nothing else, to make an account. Signing in uses a one-time link sent to that address, so there is no password to store and none to lose.

What you make here. Collections, decks, cubes, wishlists, binders, favorites, categories and combos. Your collection is private until you change that yourself, and so is a deck until you share it. What you do choose to publish can be read by anyone with the link.

A public handle and profile, if you pick one. A display name, a bio, a country and an avatar card are all optional and all yours to remove.

Visit counts, which carry no name and no identifier. Pages seen, where the visit came from, browser, operating system, device type, screen size, language and country. More on this below.

Technical records. A sign-in cookie, the address of the computer that asked for a one-time link, and the browser string of each open session. Access logs on the machine that serves the site hold an IP address, a time and a page.

Anything you send us. Feedback, a bug report or a card correction, plus your handle so we can reply in the right place.

We ask for no payment details, no real name and no location beyond a country you type in yourself. Searching cards, reading combos and building a deck you do not save all work without an account.

An email address is the one thing an account cannot do without. Nothing here makes an automated decision about you, and we build no profile of you for advertising or anything else.

Only what the site needs to work, which is why there is no cookie banner to click through. Nothing here is used for advertising, and nothing is shared with another site.

Visits are counted with Umami, which runs on our own hardware. None of it goes to anyone else.

It sets no cookie and keeps nothing on your machine. A visit is counted against a one-way hash of your IP address, your browser and the day, which cannot be turned back into you and does not survive to the next day. We never see an IP address in these counts.

It also records where on a page people click and how far they scroll, so a control nobody can find can be found out about. That is positions, page sizes and the address of the page, never the contents of the page itself.

One thing worth saying plainly: the address of a search result contains your search, so the words you search for do appear in these counts, with nothing attached saying who searched them.

If your browser sends “Do Not Track” or a Global Privacy Control signal, none of this loads at all. We check before sending the page, so it is not a request you have to trust us to ignore.

Crashes are reported to Sentry so they can be fixed. A report carries what went wrong and where, and we strip what it would otherwise take with it: cookies, sign-in headers, your IP address, the query part of the address and the body of the request, which is where a decklist or an import would be. An account is identified in a report by a one-way hash, never by an email address, and a failed import tells us its shape and line number rather than its contents.

These are the only parties who get anything, and each gets only what its line says.

Every company in that table is American, so some of this is handled outside the EU, under the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework. That includes Scryfall, because your browser asks them for each picture directly. Everything else, including every collection and deck, is stored on our own hardware in Europe.

Nothing is sold, rented or handed to an advertiser. The only other time anything leaves is a legal obligation we have no choice about.

Your account and what you made stay until you delete them, and deleting is immediate rather than a request you wait on. One-time sign-in links expire after fifteen minutes and are then thrown away, along with the address that asked for them. A session goes when it expires or when you sign out. Records used to slow down repeated sign-in attempts are deleted after a day. Access logs on the machine serving the site roll over as they fill, within weeks rather than years.

One thing survives deletion, and it is deliberate: the handle you used is held back rather than freed, so nobody else can take it and inherit the links you shared. It is kept as a reserved word, attached to nothing.

Delete everything, yourself. Your data in your settings removes the account, your collection, your decks and everything attached to them. There is nothing to ask us for and no waiting.

Take your work with you. Every collection, binder, wishlist and deck has an export, in plain text, CSV or JSON. If you want the lot in one file instead, write to us and you will get it.

Decide what is public. Your profile, your collection and your supporter mark each have a switch, and a deck is private until you share it.

Correct it, object to it, or ask what we hold. All of it by email, and you will hear back within a month, which is what the law allows us. Where we rely on legitimate interests, which is visit counts, keeping the site up and answering feedback, you can object and we will stop unless there is a reason we cannot.

Complain. If we handle something badly, the Swedish Authority for Privacy Protection takes complaints at imy.se. We would rather you told us first, but you do not have to.

Trolleri is not meant for children under 13, and we do not knowingly make accounts for them. If a child of yours has one, write to us and it will be gone the same week.

The date at the top says when this last changed. Anything that materially changes what we collect or who gets it will be said in our Discord as well as here, before it takes effect, rather than quietly edited in.