Privacy Policy

Information We Collect

At Gestic, we value your privacy. When you use our platform, we collect information necessary to provide and improve our MTG collection management services:

• Account Information: Email address and encrypted passwords for authentication.
• Collection Data: The lists of cards you catalog, including quantities, conditions, and custom tags.
• Usage Data: Basic technical information provided by your browser to ensure platform stability.
• How you found us: if you come to Gestic from one of our ads or from a link we tagged (in our newsletter, for example), your browser keeps that link’s campaign tags (such as “google / demandgen / launch2026”) and the ad’s click number for up to 90 days. If you then create an account, they are kept with your account, so we can tell which ads and links bring members and subscribers. Nothing else about the visit is kept, and they are deleted with your account.
• Subscriptions and our ads: when you come back from paying for a plan, the page tells Google Analytics and Google Ads that a plan was bought, which one and its price, so we can see which ads bring subscribers. They receive no card details, name or email address.
• Card Pictures from Gestic Companion: if you use Gestic Companion, our app and browser extension that price the cards on your screen, the pictures of the cards they find there, with your account when you are signed in (to the app, or to gestic.org in the browser where the extension runs), and the reports of a missed card you choose to send from the app. See Gestic Companion below.

Third-Party Integrations

We use industry-standard integrations to enhance your experience:

• SSO (Google, Facebook, etc.): When you sign in using these services, we only receive the basic profile information necessary to identify your account and maintain a secure session.
• Market Data: We fetch pricing information from third-party MTG marketplaces to provide real-time valuation for your collection.
• Newsletter (Flodesk): Our monthly newsletter is sent through Flodesk, a mailing service. To send it, we share your email address with Flodesk, and nothing else. Flodesk also records whether you unsubscribed, so that we never send it to you again.

Linking an eBay Account

Gestic can list cards for sale on eBay on your behalf. This is optional, and none of it applies unless you choose to link an eBay account.

• What we store: the credentials eBay issues us to act for your account, kept encrypted — one of them is long-lived, so that we do not have to send you back to eBay every time; your eBay user id and username; and the identifiers of any listing we create for you.
• Why: to publish the listings you ask for, and to notice when a card sells so that it comes off your list instead of being offered twice.
• How long: for as long as the account stays linked. Unlinking deletes the credentials and the link between the two accounts.
• Who else sees it: eBay, necessarily — we act on your behalf against their service, so the listings and the account they belong to are known to them. We share none of it with anyone else.
• Your choice: you can unlink at any time, and deleting your Gestic account removes the link as well. Once unlinked we stop tracking sales, so any card already listed on eBay stays on your Gestic list even if it sells.

Gestic Companion (Android app and browser extension)

Gestic Companion shows the Gestic price of the Magic cards on your screen, as an Android app or as an extension for Chrome and Firefox. Both are optional, and none of this applies unless you install one and start it.

• What it looks at: the Android app looks at your screen, only while its price bar is showing: Android asks for your permission each time it starts, and you stop it with ✕ on the bar or Stop in its notification. For card recognition, the browser extension looks at the tab where you pressed Start, until you stop it or close the tab, or at a picture you right-clicked. If you explicitly enable automatic start for a site, recognition also starts in tabs of that site. The extension remembers the address of each enabled site in this browser; you can turn that setting off in the extension. Both find cards on your device itself.
• What it sends us: the picture of each card it finds, with a thin border of what is around it, so that our scanner can recognise and price the card. The rest of the page stays on your device. If no card is found in a picture you explicitly right-click to price, that picture may be sent in full. With the app's scan frame on, only what is inside the frame is sent. You can also choose to send a screen picture in an Android report (below). Nothing is ever added to your lists.
• Without an account: the pictures are sent without any account. To limit how much it can be used without an account, our server counts the cards priced each day per internet address; it keeps that count in its memory for the day only, and never stores your internet address with the pictures.
• Signed in (Android app, optional): each picture is sent with your account, and we keep your account with it, to count how many cards each account prices with the app. These pictures do not count toward your plan's scans on gestic.org. The app also asks us, with your account, whether each card it prices is in your collection. Your sign-in stays on your phone until you sign out.
• Signed in for card recognition (browser extension, optional): recognition uses the sign-in your browser already has on gestic.org: when you are signed in to gestic.org in that browser, each picture is sent with your account, so that the daily limit without an account does not apply, and the extension asks us, with your account, whether each card it prices is in your collection. Gestic returns your account name, which may be your email address, so the extension can show which account is signed in. The extension never sees your password; signing out of gestic.org signs recognition out too. These pictures do not count toward your plan's scans on gestic.org. The optional API-key connection for pricing is separate, as described below; signing out of the website does not remove or revoke that key.
• Reporting a problem or a missed card (Android app, optional): on any screen, you can tap ••• on the app's bar, then Report a problem; when the app misses a card, you can also tap Report under it on the bar. The app then shows you the picture of your screen it would send, with its own bar left out and your phone's status bar blacked out; you can black out any other part of it with your finger, and add a note. The app's log of that session goes with the report: what the app did and when (the cards it found and our answers, with their prices and, when you are signed in, whether they are in your collection; how long each step took; any error), the app's version, and your phone's model and Android version. It holds neither your email address nor your password. Nothing is sent unless you press Send. The report goes with your account when you are signed in. To limit how many reports can be sent, our server counts them each day per account, or per internet address without an account; it keeps that count in its memory for the day only, and never stores your internet address with a report.
• What we keep: each picture the Android app or the browser extension sends, marked as coming from Gestic Companion (the app or the extension), with the time, the app's or the extension's version (and, for the extension, which browser), the card our scanner recognised and, if you were signed in, your account; and each report you send, with what the app's bar said, the app's mode, where its scan frame was, the cards the app saw on that screen, how many parts you blacked out, your note and the app's log. We use these pictures and reports to improve card recognition: to train and test our recognition models; and the reports also to find and fix the app's problems.
• How long: for as long as they are useful to improve recognition. Pictures sent without an account are not linked to anyone, so we cannot find the pictures of one person and cannot delete them on request. A report is different: the app shows its number once it is sent, and if you write to us at support@gestic.org with that number, we delete that report. Pictures and reports sent while you were signed in are among your account's stored scans: deleting your account deletes them (Delete My Gestic Account).
• Something personal on screen: anything right next to a card, such as a name in a live chat, can be in the thin border sent with it. The scan frame sends only what is inside it. A report sends the whole screen you saw, apart from what you blacked out: look at it before you press Send.
• Who else sees it: nobody. We do not sell or share these pictures or reports.

Browser extension pricing tools

The browser extension also offers optional pricing previews and tools for Cardmarket pages you choose. These tools are currently in a private beta and are separate from card recognition.

• Connecting to Gestic: if you enter a Gestic API key, the extension sends it only to gestic.org to verify your account and permissions and to make the collection and guide requests you choose. It keeps the key, the returned account name (which may be your email address) and identifiers, permissions, and verification information in local extension storage in that browser profile. Request pacing and a request-limit pause may also be saved. Read-my-cards and read-my-lists permissions are needed for collection pricing. The key is not included in stock or pricing exports, shown to websites, or sent to Cardmarket. It is an authentication credential: anyone with access to your browser profile may be able to access it.
• Collection pricing: when you load your lists or refresh a selected list, the extension reads your owned lists and physical card copies from Gestic. It sends card identifiers to Gestic for Cardmarket product matching, then product identifiers, finishes and the selected price field for cached Cardmarket guide quotes. The selected list, copy identifiers, card names and variants, product matches, guide quotes and source dates are cached in this browser profile; card storage locations are not retained. Unchanged data is reused, and changing a preview percentage or minimum makes no network request. These suggestions do not publish cards, change listings, or send your collection to Cardmarket. Guide prices do not provide condition- or language-specific competitor offers.
• API usage records: successful API-key requests, including account checks and collection and guide requests, update the key's last-used time, internet address and usage count on Gestic. Updates are limited to once a minute per key, so the count is approximate. You can see the time and count in Gestic Settings under API keys. Forgetting or revoking a key does not erase these server records; they are removed when your Gestic account is deleted.
• Your control: use Clear collection cache to remove imported collection data, matches and quotes from this browser while keeping your key. Forget key removes the saved key, account information and collection cache from that browser; connecting a different Gestic account also clears this collection cache. Existing local listing previews and captured stock pages are separate and can be cleared in their own tools. Forgetting does not revoke the key on Gestic; revoke it in Gestic Settings to prevent further use. Removing the extension also removes its local storage.
• Pricing previews: your pricing rules stay in this browser until you replace them or remove the extension. Imported snapshots stay here until you replace or clear them, or remove the extension. Sample inventory and quotes are invented and labelled as examples. This beta does not fetch current competitor offers or automatically reprice your whole stock.
• Reading stock: when you ask to read a supported Cardmarket stock page, the extension stores the loaded listing data in this browser, including card and listing identifiers, card variants, quantities, prices, the account information needed to identify that page, the page's address (without its search terms) and the time you read it. It does not send that captured stock to Gestic. You can clear the saved page or export it yourself; exported files remain wherever you save them.
• Adjusting price fields: when you open the bulk price tool, it reads the loaded form and keeps a temporary comparison of its fields in that tab, including the signed-in Cardmarket account name, comments and form values needed to detect subsequent changes. Applying a preview verifies your Gestic API key and then changes only the selected unsaved price fields. These form values are not sent to Gestic. This bulk-field tool does not submit the Cardmarket form: you review it and use Cardmarket's normal submission controls yourself. Closing or navigating away from the page ends this temporary form session.
• Saving one listing price: the separate saved-stock pricing tool reads the saved listing you select directly from Cardmarket, including its account and article identifiers, product, variant, quantity, comments and price. It checks product identity against Cardmarket product responses fetched when needed or product pages you ask it to remember. For guide suggestions it sends product identifiers, finishes and the price field to Gestic; it does not send your Cardmarket account, article identifiers, quantities or comments. Product identities and guide quotes are cached in this browser and reused, including across listings. The optional stock-page quote action reads that stock page directly and groups requests to Gestic.
• Saving and checking a change: after you review and choose Save, this tool verifies your Gestic key and the native listing, then sends one direct listing-edit request from your browser. It makes separate direct reads to check the result, without interacting with the displayed Cardmarket page. Cardmarket receives its normal listing-edit request through your signed-in browser session. An uncertain result is not automatically submitted again. Undo is a separate reviewed change that restores a recorded price only if the listing still matches the latest confirmed change.
• Local change records: before requesting a save, the tool records the account and article identifiers, card details, full quantity, comments, old and proposed prices, pricing-rule and guide references, and the status of the attempt in a separate local journal. A later native read records the observed result. The journal contains no API key, session cookie, native form token or raw request payload. It remains after closing the browser, forgetting a Gestic key or changing the Gestic connection, so an unfinished change can still be checked. The separate product and guide caches also remain, but a guide cache is reused only for its associated Gestic account. Forgetting the key prevents new saves; reading an already recorded result does not need that key. Journal records can be exported in the tool; exported files remain wherever you save them. Removing the extension removes these local caches and records.
• Access to Cardmarket: these local tools use the browser session of a Cardmarket tab you connect. Saved-stock pricing makes direct requests to Cardmarket for listing details, product identities and reviewed price updates; other preview tools read pages you have already opened. They do not ask for your Cardmarket password, extract its session cookies, or send them to Gestic. Cardmarket receives requests through your signed-in browser session, including price updates you review and choose to save.

Your Rights & Data Control

You have full control over your data on Gestic:

• Access & Export: You can view and export your entire collection at any time.
• Emails: We send account emails (welcome, password reset, reminders about an unused account) and, unless you turn it off, a monthly newsletter about what is new on Gestic. You can decline the newsletter when you create your account, turn it off at any time under Settings → Monthly newsletter, or use the unsubscribe link at the bottom of any issue. Every other email we send carries its own unsubscribe link.
• Account Deletion: You can request deletion of your Gestic account and its associated data. See Delete My Gestic Account for the steps, the types of data deleted or retained, and retention periods.
• Connected Accounts: If you have linked an eBay account, you can unlink it at any time without deleting your Gestic account. Deleting your Gestic account unlinks it too.

Contact Us

If you have any questions regarding this Privacy Policy or how we handle your data, please contact us at: support@gestic.org