Ponder — Privacy Policy

This Privacy Policy explains what information Ponder, also styled "ponder*" (the "App"), and our website, pondertheapp.com (the "Site"), collect, how we use it, and the choices you have. Ponder is operated by an individual developer ("Ponder," "we," "us," or "our").

Ponder is an independent, fan-made application for organizing and tracking in-person Magic: The Gathering games and events. It is not produced, endorsed, sponsored, or affiliated with Wizards of the Coast LLC or Hasbro, Inc.

By using Ponder, you agree to this Policy. If you do not agree, please do not use the App.

---

1. Information You Give Us

Account information. To create an account you provide an email address and a password. Passwords are handled by our authentication provider and are stored only as salted hashes — we never see or store your plaintext password.

Age verification. Ponder is for users 18 and older. At signup, we collect your date of birth to confirm you meet this requirement. Your date of birth is stored separately from your public profile, is never shown to other users, and is used only for age verification.

Profile information. You may optionally add a username (a unique public handle), a name, a profile photo, a bio, pronouns, and a location. Everything in your profile other than your email address and date of birth is visible to other Ponder users.

Content you create. This includes events you host or join, match results, game logs, seat notes, decks and deck lists, deck photos, cubes, tags, feedback you submit, and any other content you enter into the App. Photos you upload are automatically stripped of embedded location and device metadata (EXIF data) before they are stored.

Deck scanning. If you scan a photo of a decklist or cards, text recognition runs entirely on your device. The scan itself is not sent to us or to anyone else; only the card names you choose to save become part of your deck.

2. Information We Collect Automatically

Usage and device data. Our hosting and authentication providers automatically log basic technical information such as IP address, device and operating system type, app version, timestamps, and error diagnostics. We use this to keep the App running, investigate bugs, and detect abuse.

Ponder does not use third-party advertising networks, advertising identifiers, or cross-app tracking. We do not sell your personal information.

Website. The Site uses Vercel Web Analytics and Speed Insights to measure page views and loading performance. These tools do not use cookies, do not identify you personally, and do not track you across other websites.

Location. Ponder does not access your device's GPS or precise location. If you enter a location on your profile or on an event, it is text you typed yourself. As noted above, photos are stripped of any embedded GPS data before upload.

3. How We Use Your Information

We use the information described above to:

• Create and maintain your account, verify your age, and authenticate you.
• Operate core features — hosting and joining events, pairings, standings, records, statistics, trophies, and history.
• Show your public profile, username, and results to other users where the feature calls for it (for example, standings in an event you joined, or search results).
• Send transactional messages such as email confirmation, password resets, and in-app notifications about invites, events, and requests.
• Diagnose problems, improve the App, and respond to feedback and support requests.
• Enforce our Terms of Service, and protect the safety and rights of our users.

We do not use your information for automated decision-making that produces legal or similarly significant effects.

4. What Other Users Can See

Ponder is a social app, so some information is visible to others by design:

• Your username, profile photo, bio, pronouns, name, and location are visible on your public profile.
• Events you participate in, your match results, standings, records, trophies, and decks you have marked as visible can be seen by other participants and, in some cases, by anyone using the App.
• Private seat notes are visible only to you.

Your date of birth and email address are never shown to other users. You control what optional profile fields you fill in, and you can block other users.

5. How We Share Information

We do not sell your personal information or share it for advertising. We share information only in these situations:

Service providers. We use third parties to run the App, and they process data on our behalf:

• Supabase — database, authentication, file storage, and realtime infrastructure.
• Resend — delivery of transactional emails, such as email confirmation and password resets. Resend receives your email address and the message content.
• Vercel — hosting and cookieless analytics for the Site.
• Apple — app distribution through the App Store and TestFlight.

Card and deck data services. When you search for cards or import a deck or cube, the App sends that request (such as your search text or the link you paste) directly from your device to Scryfall, Moxfield, Archidekt, or CubeCobra. As with any website you visit, these services can see your device's IP address. They do not receive your Ponder account information, and their own privacy policies govern what they do with the request.

Legal reasons. We may disclose information if we believe in good faith that it is required by law, legal process, or a valid government request, or is necessary to investigate fraud, abuse, or threats to safety.

Business transfer. If Ponder is ever acquired or transferred, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. Data Retention

We keep your information for as long as your account is active. Backups of our database are retained for a limited period and are overwritten on a rolling basis.

Deactivation vs. deletion. You can deactivate your account to temporarily hide it, or delete it to permanently remove your personal information.

When you delete your account, we permanently erase your email address, date of birth, password, profile photo, bio, and other personal information, and you can no longer sign in. Because match results, standings, and event history are shared records that other participants rely on, your username is retained and continues to appear in that shared history and in other players' records after deletion — it is simply no longer linked to your email, login, or any other personal information.

7. Your Rights and Choices

You can:

• Access and update your profile information at any time in the App.
• Export your data — download a copy of the information tied to your account from within the App (Settings).
• Deactivate your account temporarily, or delete your account permanently, from within the App. Deletion removes your personal data as described in Section 6 above.
• Block users you do not wish to interact with, and report content or behavior that violates our Terms.

Depending on where you live, you may have additional rights — such as the right to know what information we hold about you, to correct it, to delete it, or to object to certain processing. To make a request, email support@pondertheapp.com. We will respond within the time required by applicable law. We will not discriminate against you for exercising these rights.

8. Security

We protect your data with encryption in transit (HTTPS/TLS), encryption at rest, row-level security policies that restrict what any given account can read or write, and access controls on administrative tools. Passwords must meet a minimum length and are checked against known breached-password lists at signup. No system is perfectly secure, and we cannot guarantee absolute security, but we take these safeguards seriously and respond promptly to reported vulnerabilities.

To report a security issue, email support@pondertheapp.com.

9. Children's Privacy

Ponder is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18, and we verify age at signup. If we learn that we have collected information from someone under 18, we will delete it and terminate the account. If you believe a child has provided us information, contact support@pondertheapp.com.

10. International Users

Ponder is operated from the United States, and your information is stored and processed there. If you use the App from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will provide additional notice in the App. Your continued use of Ponder after a change takes effect means you accept the revised Policy.

12. Contact

Questions about this Privacy Policy or your data:

support@pondertheapp.com