Mox Toolbox keeps what you put into it — your binders, your decks and your settings — so it can show them back to you on every device you sign in on. It does not sell anything about you, show adverts, or track you around the internet, and it has no analytics. You can delete your account and everything in it yourself, from the Account page, at any time.

Your account: the email address you signed up with, and your password — stored only as a one-way hash, so nobody, including whoever runs the server, can read it back.

What you record: your binders and the cards in them, your decks and the folders they are in, how you like decks shown, how you have dressed the playtest table, and your membership, if you have one. If AI card picks are switched on for your account, the picks you asked for are kept with the deck, and the number of requests you have made is counted against your monthly allowance.

A small amount of bookkeeping goes with that: which of your phone's changes the server has already applied, so a change made offline is not applied twice.

The app keeps some things on the device itself rather than on the server: what keeps you signed in, a copy of your collection so it works without signal, cards you have scanned but not yet reviewed, the cards and commanders you have opened recently, and your settings. In a browser these live in the browser's storage. Signing out clears the copy of your collection; deleting your account also clears unreviewed scans.

The scanner reads cards through your phone's camera, and the reading happens on the phone. What is sent to the server is the text it read off the card and a small fingerprint of the card's art, which is what matches it to a printing. The picture itself never leaves your device and is not kept.

The reading is done with Google's ML Kit. It runs on the phone and is not sent the picture, but it does send Google diagnostic information about how the scanner is performing, as Google's ML Kit terms describe.

Complete, legal decks can be used to work out which cards get played together, which is what makes suggestions better than a popularity list. What is recorded is the card list and the format — not the deck's name, not when you built it, and nothing about you inside the decklist itself. It is kept against your account so it can be deleted with it.

In the European Economic Area, the United Kingdom and Switzerland this only happens if you turn it on, and turning it off deletes everything it has kept. Elsewhere your finished decks are included, and the Account page says so.

A deck you mark public can be opened by anyone with its link and is listed on its commander's page, with its name and its cards but not who built it. Mark it private again and it comes off the list.

Scryfall: card images are loaded straight from Scryfall's servers, so Scryfall sees your device's address when it asks for them, as any website does.

Anthropic: only if AI card picks are on for your account and you ask for them. The deck's commander, its card list and the new cards it could play are sent to Anthropic, whose Claude model picks the ones that fit. Your email, your name and the rest of your collection are not sent. The request comes from the server, not your phone.

Cloudflare: the server sits behind Cloudflare, which carries its traffic and protects it from abuse, and so sees requests pass through.

Google: the scanner's diagnostics, described above.

Shops: the buy links go to TCGplayer, Card Kingdom, Star City Games and Cardmarket only when you press one, and what happens there is between you and them.

Nothing else. The app contains no advertising or analytics code, sends no email, and does not sell or hand over anything about you.

What you record is kept for as long as your account exists, and goes when you delete it. The server keeps ordinary logs of requests and errors, which can include the address a request came from and the account it was for; they are used to run the service and fix it, and for nothing else.

Open Account, enter your password under Delete account, and confirm. Your account and everything in it — every deck, binder, shared decklist, setting and membership — is deleted straight away and cannot be recovered, and any other device signed in to it is signed out on its next request. A paid membership has to be cancelled with whoever bills it as well: deleting the account does not stop a subscription charging you.

Mox Toolbox is not meant for children under 13, and does not knowingly keep anything about them. If a child has made an account, deleting it removes everything.

When this policy changes, the date at the top changes with it, and the release notes say so.

Write to [email protected] about anything on this page, including a request for a copy of what is kept about you.

Everything the app keeps about you is also shown to you in the app, and can be deleted from the Account page.