1. Who Runs This Site
ManaBleed is an independently run site. For any question about this policy, or to exercise any of the rights described below, contact privacy@manableed.com.
2. What Stays Only In Your Browser
ManaBleed is a static site with no user accounts and no backend database that receives what you type or click. The Deck Calculator's decklist input, My Binder's tracked cards, and your recent searches are all stored using your browser's local storage, on your device only. None of it is ever sent to us, and we have no way to see it, back it up, or recover it if you clear your browser data -- that's also why My Binder has its own Export feature, so you can keep your own copy.
3. Google Analytics (Only If You Say Yes)
We use Google Analytics to understand how many people visit ManaBleed and which pages are useful. This script does not run by default. The first time you visit, a banner asks whether you'd like to allow it -- if you decline, or simply close the banner without choosing, nothing is loaded and no analytics cookie is set. You can change your answer at any time using the "Manage Cookie Preferences" link in the footer.
If you accept, Google Analytics collects standard usage data: which pages you view, how long you stay, what device and browser you're using, an approximate location derived from your IP address (Google Analytics 4 does not store full IP addresses), and which site referred you here. This data is processed by Google and may be transferred to and stored on servers in the United States.
| Name | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique visitors | 2 years |
| _ga_<container-id> | Persists session state for Google Analytics | 2 years |
| manableed_consent | Remembers your cookie choice (local storage, not a cookie) | Until you clear browser data |
4. Cloudflare Web Analytics
Separately from Google Analytics, ManaBleed also runs Cloudflare Web Analytics, which loads on every page regardless of your cookie choice. Unlike Google Analytics, it is cookieless by design -- it does not use cookies, does not store any persistent identifier tied to you, and cannot track you across visits or sites. It only gives us aggregate counts (pageviews, referrers, approximate location from IP address, which is not stored) so we can see how many people are visiting the site even if a visitor declines or never responds to the Google Analytics consent banner. Because it involves no persistent personal identifier, it does not require consent under the GDPR. See Cloudflare's Web Analytics page for details on how it works.
5. Affiliate & Marketplace Links
Card pages and set pages link out to third-party marketplaces, including TCGplayer and Mana Pool, some of which are affiliate links that may earn ManaBleed a commission on a resulting purchase at no extra cost to you. Once you click through, you're on that company's site under their own privacy policy and tracking -- we don't control, and don't receive, any data about what you do there.
6. Legal Basis For Processing
Google Analytics only runs after you give consent (GDPR Article 6(1)(a)), and that consent can be withdrawn at any time via "Manage Cookie Preferences" below. Cloudflare Web Analytics runs under legitimate interest, since it involves no persistent personal identifier for it to require consent for in the first place. Every other part of the site -- card pages, the Deck Calculator, My Binder -- runs entirely in your browser and involves no processing of personal data by us at all.
7. Your Rights
Under the GDPR you have the right to access, correct, delete, restrict, or export data held about you, and to object to its processing. Because ManaBleed itself stores no personal data on any server -- everything traceable to you individually lives either in your own browser's local storage (which you can clear or export yourself) or inside Google's systems (reachable via Google My Activity or the Google Analytics Opt-out Browser Add-on) -- most of these rights are exercised directly through those tools. For anything else, or if you're unsure where to start, email privacy@manableed.com.
8. Data Retention
Google Analytics is configured to retain event-level data for 14 months before it's automatically deleted, per Google's default retention setting. We do not extend or override this.
9. Children's Privacy
ManaBleed is not directed at children and we do not knowingly collect data from anyone under 16.
10. Changes To This Policy
If this policy changes, the "Last Updated" date at the top of this page will change with it. We recommend checking back periodically if you'd like to stay informed.