Privacy Policy

In the mobile app, Magister creates a Guest account with an internal identifier when you start a trial, buy a Library Pass, or restore a purchase. Browsing the game library or opening settings does not create an account. We collect your email address when you sign in or request a mobile-app launch alert, the app store you selected for that alert, the questions you ask, the games you select or request, and basic service records such as sign-in and error logs. When you buy or restore a trial or Library Pass, we receive purchase and entitlement information from Stripe for web purchases or from Apple or Google through RevenueCat for in-app purchases. RevenueCat also receives an internal account identifier, basic app and device context, and paywall interactions needed to present, measure, and manage in-app purchases and access. To enforce a single mobile trial, we retain a protected digest of the Apple trial transaction and its original purchase time.

Collections store the games you add, your collection username, group membership, and uploaded shelf photos. OpenAI processes the questions, AI search requests, and shelf photos you choose to send. TypeSafe (Jev) processes questions, rulebook excerpts and draft answers to retrieve and verify evidence. Algolia stores public board-game search records and receives search text and game identifiers to restrict results to your collection, without your account details. Delete your account to remove your collection data and photos.

We use this information to sign you in, provide answers, keep your Library Pass available, send requested mobile-app launch alerts, respond to game requests, protect the service, and understand how to make Magister better. We do this to provide the service you request, fulfil purchases, meet legal obligations, and keep Magister safe and reliable.

Magister uses Cloudflare to run our service, store account and app data, host the website, and deliver email; Convex to store published board-game data; OpenAI to process board-game questions; TypeSafe (Jev) to retrieve and verify rulebook evidence; Stripe to process web payments; Apple and Google to process in-app purchases; RevenueCat to present and measure in-app paywalls and manage purchase access; PostHog for limited product analytics; and Sentry for credential- and PII-filtered crash and error diagnostics. Each provider handles only the information needed for its part of the service. Some providers process information in other countries under their own safeguards.

We use essential cookies and browser or app storage to keep you signed in, remember your game choice, restore a checkout, and remember privacy choices. Web product analytics use no analytics cookies or browser storage. In the mobile app, PostHog keeps a random analytics identifier and its event queue only in memory for the current app session. We do not use analytics autocapture or session replay.

We send only selected product events such as page or app opens, completed-answer outcomes, selected games, Library Pass interest, web checkout starts and completed purchases, sign-in milestones, and game requests. These events may include basic context such as platform, app version, form factor, locale, an internal game identifier, and bounded result, timing, and citation counts. We do not send question or answer text, email, account identifiers, or payment-provider identifiers to PostHog, and we do not use analytics for advertising. You can disable mobile product analytics in Settings.

We also keep a limited first-party record of how a web visit was broadly classified, the type of landing page, and whether a purchase completed. It contains no email, account identifier, question, answer, full URL, search query, or payment-provider identifier, and it is deleted after 400 days.

Magister does not sell personal information and does not use it for advertising. We do not run third-party advertising in the service.

We keep information for as long as we need it to operate Magister, maintain your access, meet legal obligations, resolve disputes, and keep reliable records. We keep limited PostHog product events only while needed to compare aggregate use and improve the service, and for no longer than one year under our current PostHog plan. Stripe, Apple, and Google keep payment records under their own policies. RevenueCat keeps paywall, in-app purchase, and entitlement records while your Magister account is active. If you delete your account, we erase the RevenueCat customer and irreversibly detach the limited purchase records we must retain for refunds, disputes, legal obligations, later purchase restoration, and enforcement of the one-time trial window.

You can delete a Guest or email-linked account in the mobile app under Settings. Deletion removes the account, sign-in information, saved questions and answers, individual game requests, and the RevenueCat customer. It does not issue a refund; eligible store purchases can be restored later. We keep limited purchase records when the law requires it or when needed to maintain a completed purchase or the one-time trial, but they are irreversibly detached from the deleted account. You can ask us for access to or correction of your information by writing to support@askmagister.com. Depending on where you live, you may also have rights to restrict or object to processing, move your information, or complain to your local data-protection authority. You can disable mobile product analytics at any time from Settings.