Privacy Policy (Manatap.ai)
Effective date: July 1, 2026
ManaTap is a Magic: The Gathering companion application and service built to help players build decks, analyse strategies, manage collections, use game-night tools, join tournaments, and explore MTG ideas with AI-powered features.
ManaTap mobile app (iOS & Android)
The ManaTap app is built with Expo and React Native. When you use the app with an account, data is sent to our backend at the URL configured in the app (typically the same site as this policy, e.g. EXPO_PUBLIC_API_BASE_URL) and to Supabase for authentication and synced content (e.g. decks, collection), consistent with the rest of this policy. Optional PostHog analytics in the app records in-app usage (e.g. screens and events) only if you have opted in—use the toggle on this page (web) or in the app’s Privacy screen. Pro subscriptions purchased in the app are processed by Apple or Google as in-app purchases; RevenueCat manages entitlements and may receive purchase-related identifiers as described in their privacy policy.
What data we collect
- •Account data: email address, login provider, profile information, and authentication details managed by Supabase
- •User content: decks, decklists, collections, wishlists, saved cards, tournament participation, public profile information, comments, and other content you choose to create or store in ManaTap
- •AI data: prompts, decklists, collection data, chat messages, and other information you send to ManaTap features so we can generate deck analysis, recommendations, answers, and other AI-powered responses
- •Usage data: website page visits and actions; app screens, events, device/app diagnostics, and feature usage analytics, only where analytics is enabled or consented to
- •Payment data: website tips or checkouts via Ko-fi, PayPal, or Stripe; mobile subscriptions and purchases via Apple/Google in-app purchases and RevenueCat. ManaTap does not store full card numbers
How we use it
- •Provide core ManaTap features such as deck building, deck analysis, collection management, wishlists, life counter tools, tournaments, profiles, comments, and AI chat
- •Generate AI-powered deck analysis, recommendations, budget swaps, strategy help, and other responses requested by the user
- •Sync user data across devices and accounts
- •Process subscriptions, purchases, tips, and entitlements
- •Improve reliability, fix bugs, understand feature usage, and protect ManaTap from abuse, spam, misuse, fraud, and security issues
Who we share data with
- •Supabase, for authentication, database, and user data storage
- •PostHog, for optional analytics
- •RevenueCat, for mobile subscription entitlement management
- •Apple and Google, for in-app purchases
- •Stripe, PayPal, and Ko-fi, for website payments or donations
- •Scryfall, for card data/images where applicable
- •AI providers used to process AI requests and generate responses
- •Hosting/infrastructure providers used to run the website, app backend, APIs, and database
Your rights
If you're in the UK/EU, you can request a copy of your personal data or ask us to delete it.
Account deletion instructionsContact us: support@manatap.ai
Our commitments
We do not sell your personal data.
We do not use your deck, collection, wishlist, tournament, or AI chat data for third-party advertising.
AI features may send the information you provide, such as prompts, decklists, collection data, or chat messages, to AI service providers so a response can be generated. Do not submit sensitive personal information to AI chat or analysis tools.
Cookies & tracking
On the website we use strictly necessary cookies for authentication and preference storage, and optional analytics cookies with your consent. The mobile app does not use browser cookies; authentication uses Supabase session tokens stored on your device, and optional analytics uses PostHog only when you opt in.
You can also toggle analytics/data sharing in your Profile → Security/Privacy panel.
Legal Compliance
We comply with UK and EU data protection laws (GDPR). Contact us for access or deletion requests.