Privacy Policy
Last updated 26 July 2026
Commander Daily (“the site”, “we”) is a UK-based Commander/EDH content site. This page explains what personal data the site collects, why, and what rights you have over it under UK GDPR.
Contact form. Name, email address, the reason you selected (general enquiry, deck suggestion, or bug report), an optional suggested commander, and your message. Submitted via Netlify Forms — see “Who we share it with” below.
Draft Legendary (solo). The name you enter is submitted the same way, via Netlify Forms, alongside the randomly drafted card shown back to you.
Draft Legendary (group). Names entered here are used only in your browser to label each random draw on screen. They are never sent to our server or stored anywhere.
There is no account system on Commander Daily — nothing to sign up for, no passwords, no user profiles. Every deck page is public by design (see About) and isn’t tied to any visitor. We don’t run analytics or advertising trackers, and we don’t sell or share personal data for marketing purposes. See the Cookie Policy for what, if anything, is stored in your browser.
We use contact form and Draft Legendary submissions solely to respond to your message or display your result, and — for deck suggestions — to consider them for future daily decklists. The legal basis is your consent in submitting the form (UK GDPR Article 6(1)(a)), and, for replying to enquiries, our legitimate interest in doing so (Article 6(1)(f)).
Form submissions are processed and stored by Netlify (our hosting provider), which handles the form-capture infrastructure — see their own privacy policy for how they process it. Deck and card data lives in a Neon Postgres database, but that data is card/deck content, not personal data about you.
Card names, images, rules text, and legality data shown across the site come from Scryfall’s public API — this is Magic: The Gathering card data, not information about visitors.
Contact and Draft Legendary submissions are retained in Netlify’s Forms dashboard for as long as we need them to respond to you or consider a deck suggestion, and are deleted once no longer needed. You can ask us to delete a submission at any time (see “Your rights” below).
Under UK GDPR you can ask us to access, correct, or delete personal data we hold about you, or object to how we use it. Contact us to exercise any of these. If you’re not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO).
If what the site collects changes — for example, if we add analytics or an account system in future — we’ll update this page and the date at the top.