Privacy & cookies
Last updated 19 October 2026
Brewhall (brewhall.co.uk) is a free Magic: The Gathering Commander deck builder run by Jamie Trewhella, an individual in the United Kingdom. For anything about your data, email hello@brewhall.co.uk.
You can build decks without an account. This page explains what is collected when you use the site, why, and what you can do about it under UK data protection law (the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations).
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Your email address and password, if you create an account. The password is stored scrambled (hashed) and nobody can read it. | To sign you in. | Contract: providing the account you asked for. |
| Decks you save: their names, commanders, card lists and the prices shown when you saved them. | So you can see your decks again on any device. If you press Share on a deck, anyone with its link can see that deck (not your email or anything else about you) until you stop sharing it. | Contract. |
| Basic technical details your browser sends with every request, such as your IP address and browser type. | To deliver the site and keep it secure. | Legitimate interests. |
| Anonymous visit counts: which page was visited, the referring site, browser and country, and actions such as building, saving, sharing or copying a deck. No cookies are set and nothing is kept that identifies you. | To see how people find the site and which parts are useful. | Legitimate interests. |
| Advertising cookies and identifiers, only if you agree to them. | To show adverts that pay for the site. | Consent. |
We don't sell your data, and we don't use it for anything else.
Who else handles your data
- Supabase stores accounts and saved decks.
- Netlify hosts the website and keeps short-lived server logs.
- Umami counts visits to the website without cookies (see above). It doesn't store your IP address or anything else that identifies you.
- Scryfall supplies card details, images and prices. Your browser fetches these directly from Scryfall, so Scryfall sees your IP address. Nothing about your account is sent.
- EDHREC and Commander Spellbook are asked about the deck being built: which cards decks with the commander run, and whether the list has two-card combos. Brewhall's own server asks them, so they only see the commander's name and the card list, not you.
- Google Fonts supplies the site's fonts, so Google sees your IP address when they load.
- Google AdSense shows adverts on the site (see below).
Some of these companies process data outside the UK, including in the United States. Where they do, they use safeguards approved under UK law, such as the UK International Data Transfer Addendum or the UK–US data bridge.
Adverts and cookies
Brewhall is free and is paid for by adverts from Google AdSense. Google and its partners use cookies and similar technologies to show adverts, to measure them, and to stop fraud. With your consent they may also use them to show adverts based on your interests, using your visits to this and other websites.
When you first visit from the UK, the EU or Switzerland, a message from Google asks whether you agree. If you say no, you may still see adverts, but they won't be personalised. You can change your choice at any time with the Cookie settings link at the bottom of every page.
You can read how Google uses information from sites that use its services, and turn off personalised adverts from Google altogether in Google's ad settings. You can also opt out of many other companies' personalised adverts at Your Online Choices.
| Stored on your device | Purpose | Needs consent? |
|---|---|---|
| Sign-in details (in your browser's local storage, if you sign in) | Keeps you signed in between visits. | No, strictly necessary. |
| Your consent choice (set by Google's consent message) | Remembers what you chose. | No, strictly necessary. |
| Google advertising cookies | Showing, measuring and personalising adverts, and preventing fraud. | Yes. |
How long we keep it
Your account and saved decks are kept until you delete them. You can delete any deck from My decks, and delete your whole account with the Delete my account button there, which removes your account and all your saved decks straight away. Server logs are kept by our hosting providers for a short period for security.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Email us and we'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office.
Children
Accounts are for people aged 13 and over.
Changes
If this policy changes, the new version will be posted here with a new date at the top.
Brewhall is unofficial Fan Content permitted under the Fan Content Policy. Not approved/endorsed by Wizards. Portions of the materials used are property of Wizards of the Coast. ©Wizards of the Coast LLC.