Privacy

The short version: Delvefall keeps almost nothing about you. There are no accounts, no tracking cookies, and your IP address is never stored. This page says exactly what the site does and does not do.

Counting visitors

The site keeps a tally of how many different people visit each day, so I can tell whether it is being used. It does this without storing anything that points back to you: your IP address is turned into a one way fingerprint using a secret that changes every day and is then thrown away. Within a single day that fingerprint lets the count avoid counting you twice; once the day is over the secret is deleted, and after that nobody (including me) can turn the stored fingerprints back into an IP address or link them to you. All that survives is a number: how many people came that day. Your raw IP address is never written down.

This happens on the server, so nothing is stored on your device and there is nothing to consent to. It cannot follow you across days or to any other website.

Cookies and local storage

There are no tracking or advertising cookies. The site uses your browser's local storage only for features you are actually using: remembering which cards the unique-card dealer has already shown you, keeping your place when you sort results, and remembering your chosen currency. That information stays in your browser, is never sent anywhere to identify you, and clearing your browser data removes it.

When you report a bad match

If you use the report button on a result, the site stores what you told it about the cards involved and your note so the matcher can be improved. To stop that form being abused it also keeps the same one way daily fingerprint described above, never your actual IP address. It is only ever looked at across the past hour, which is all it takes to notice one source sending a flood of reports, and once that day's secret is thrown away the fingerprint stored beside the report stops pointing at anything at all.

Other services

Card names, images and prices come from Scryfall, and card images load directly from Scryfall when you view a page. The site is hosted on Railway and its domain runs through Cloudflare, both of which process requests in order to serve the site. Nothing about your visits is sold or shared for advertising.

Questions

This is a personal project, not a company. If something here needs clarifying, the Discord is the place to ask.