Privacy Policy
Version 1 - 18 October 2026
Commander Companion is a free life and commander-damage tracker for in-person Magic: The Gathering games. It is built to need as little about you as possible: there are no accounts, no email addresses, no tracking cookies, no ads and no analytics. This policy explains what we do hold. It is not a contract; using the app is covered by our Terms of Service.
Who we are
Commander Companion is run by Ethan Sawyer, an individual in the United Kingdom, on a non-commercial basis. He is the data controller. He also runs Dox Box, and both are hosted on the same servers. Contact: privacy@doxbox.org. We process personal data under the UK GDPR and the Data Protection Act 2018, and give people in the European Economic Area the same rights.
What we collect
| Data | Why |
|---|---|
| The name you type in, and a random player ID we create for you | Showing you to the other players in your game |
| A device secret (on our servers we keep only a salted one-way hash of it) | Letting this device sign back in as you |
| Your games: lobbies you create or join, your seat, the commander you pick, and the game log (damage, life changes, turns and how long they took, concessions) | Running the game for everyone at the table |
| When you last opened the app | Knowing when your data can be deleted (see below) |
| Your IP address | Limiting how many requests each visitor can make, to stop abuse. It is held briefly in memory, in a scrambled (hashed) form, and is not written to any log or linked to your player. |
| Server logs: player, lobby and game IDs and join codes (not names or IP addresses) | Fixing faults and investigating misuse |
A nickname is fine. You don’t have to give us anything, but you need to enter a name to take a seat in a game.
Who can see it
Your name, your commander and the game state are shown to the other players in your lobby. Anyone with the lobby’s join code can join until the game starts (up to 8 players, or 2 in a two-player game), and only current members of a lobby can see its details. Card images are shown only for your own commander.
Our legal basis
Our legal basis is legitimate interests (UK/EU GDPR Art. 6(1)(f)): providing a free tool to the people who choose to use it, and keeping it safe and working. We have balanced this against your interests, paying particular attention to younger players, by collecting as little as possible, keeping it for a short time and letting you delete it at any time. We make no automated decisions about you and do no profiling.
How long we keep it
- Live game state: 24 hours.
- Lobbies and game logs: deleted about 30 days after the game ends, or after 30 days without activity.
- Your player identity: deleted, with anything still linked to it, after 12 months without opening the app.
- Server logs: up to 30 days in our central log store; each server also keeps a small rolling copy that is overwritten as new logs arrive. Server backups, where taken: up to 30 days.
- You can delete everything sooner yourself (see below).
What is stored on your device
cc-auth(browser storage): your player ID, name, sign-in token and device secret, so you stay signed in.cc-theme: your light or dark choice, saved only if you change it.- An offline copy of the app, and of recent game data for up to 24 hours, so it works on a patchy connection.
None of this is used for tracking. The storage is strictly necessary to run the app, or (for cc-theme) only remembers how you want it to look, so the law doesn’t require us to ask for consent. Settings & privacy → Sign out on this device removes your sign-in details and cached game data; your theme choice and the offline copy of the app stay until you clear this site’s data in your browser.
Who else is involved
- Hetzner Online GmbH hosts our servers in the European Union, as our processor.
- Scryfall (USA) provides card data. Our server sends it the card names you search for, and nothing about you. Your commander’s card image loads directly from Scryfall’s image server into your browser, so Scryfall sees your IP address when it loads and handles it under its own privacy policy.
We share your data with no one else, except where the law requires it (for example a court order or a police request) or to protect someone’s safety. We never sell it. Fonts and the rest of the app are served by us.
Your rights
- Delete your data: Settings & privacy → Delete my data removes your player and everything linked to it straight away, including entries that mention you in other players’ game logs. Other players’ games carry on without you. Copies in backups expire within 30 days.
- Access, correction or restriction: email privacy@doxbox.org with the player ID shown in Settings & privacy, so we can find your data.
- How quickly we respond: without undue delay and within one month. If we need more information from you, the month starts once we have it; for complex requests we may take up to two more months and will tell you why.
Your right to object. You can object at any time, on grounds relating to your situation, to our using your data. Email privacy@doxbox.org and tell us what you object to. We will stop unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims. Deleting your data in Settings stops all use of it straight away.
Complaints. If you are unhappy with how we have handled your data, tell us at privacy@doxbox.org. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You can also complain to the Information Commissioner’s Office (ICO) or, in the EEA, your local data protection authority, at any time.
Age and younger players
Commander Companion is for people aged 13 or over. Because some players will be under 18, we built it with them in mind: you don’t need an account or email, we only ask for a name (a nickname is best), we never use your location, there are no ads, no tracking and no profiling, your name is shown only to people in your lobby, and you can delete everything in Settings at any time. If anything here worries you, talk to a parent, carer or another adult you trust, or email us. If you think a child under 13 has used the app, tell us and we will delete their data.
Security
Connections between your device and our servers are encrypted (HTTPS). On our servers, device secrets are stored only as salted hashes, and our databases are kept off the public internet, behind firewalls on a private network.
Changes
As there are no accounts, we can’t contact you about changes. We will update the version and date at the top of this page, so please check it from time to time.