Podium runs this Podium and is the controller of the personal data in it (the law of US applies). Whoever operates the machine it runs on holds the disk: what you store here, they can read. If you want a hard guarantee, keep your collection on an install of your own.
Your name and handle, your passkeys (never a password), an email address if you add one, and what you put in: your collection, decks, games, trades, wishlists and events. Who else sees each of them is yours to choose in My settings → Privacy & sharing.
Scryfall, MTGJSON, Card Kingdom, EDHREC, Commander Spellbook: card data and prices come from them, and they receive nothing about you.
| Sessions (signed-in devices) | 30 days after their last use |
| Notices in the inbox | 90 days once read, 365 days at most |
| Your account, collection, decks and games | until you delete them (My settings → Your data); a deleted account leaves only its id, so a restored backup cannot bring it back |
| Backups | whole chains, oldest first, beyond the backup budget (at least 3) |
| The audit log of Admin actions | for the life of the community |
Export or delete everything that is yours in My settings → Your data; block and report in a person's profile; the community's rules are shown before you join and whenever they change. Ask Podium about anything else.