This Privacy Policy explains how CardMystic (“we”, “us”, or “our”) collects, uses, stores, and protects information when you use our website. We are committed to transparency and the responsible handling of user data.

CardMystic currently collects minimal analytics data through Microsoft Clarity. In the near future, we will introduce an optional user account system that will store basic profile information such as email, username, and name.

1. Current Data Collection

We collect the following information to improve our service:

• Search queries: All search queries you submit are tracked and stored for training purposes to improve our AI search models
• Card interaction feedback: Dislike clicks on card search results to help refine search quality and relevance

We also use Microsoft Clarity to collect anonymized analytics, which may include:

• Device and browser details
• Interaction data (clicks, scrolls, navigation)
• Region-level location information
• Session recordings of page interactions

2. Future Data Collection (User Accounts)

When user accounts become available, we will collect and store the following:

• Email address
• Username
• Name or display name
• Password (securely hashed and never stored in plain text)

This information will allow users to save preferences, access personalized features, and improve their experience on CardMystic.

For search queries and feedback:

• Training and improving our AI search models
• Refining search result relevance and quality
• Understanding user preferences and search patterns

For analytics:

• Understanding site performance and usage patterns
• Improving overall user experience

For user accounts (when available):

• Creating and managing your user profile
• Authenticating and securing your account
• Providing personalized site features
• Communicating with you about your account or service updates

We do not sell, rent, or share your personal information with third parties.

We take security seriously. User passwords will be securely hashed using industry-standard best practices. Personal information will be protected through technical and administrative safeguards to prevent unauthorized access, disclosure, or misuse.

Because analytics data is handled exclusively by Microsoft Clarity, it is processed according to Microsoft’s security standards.

We use Microsoft Clarity for analytics. Their policies apply to the collection and processing of analytics data:

• Clarity Terms
• Microsoft Privacy Statement

No personal user data (email, username, etc.) is ever shared with Microsoft Clarity.

We may update this Privacy Policy as we launch new features, including the upcoming user account system. Any changes will be reflected on this page with an updated “Last Updated” date.