Your email, to sign you in. The data you save — settings, decks and match history. Every match you finish: its decklist, result and game log. And, if you use the desktop app, crash reports — Crash reports below says exactly what is in one and how to switch them off.
The MTGA game log we upload is card and turn data only. It carries no player names, no account ids and no file paths. The app checks every upload before it leaves your machine and refuses to send anything that still looks identifying.
Two things. First, to run your account and sync your matches across your devices — that is the service you signed up for. Second, we keep a second copy with the link to your account removed, and use it to improve our card and deck models for every player.
Uploading finished matches is part of how SevenWins works. It is not a setting you can turn off, on any plan. If that is not for you, please do not create an account. We never sell your data.
When the desktop app crashes, or a feature quietly stops working, it writes a report: the error type and its message, the place in our own code it came from (file, line, function, and that line of our source), your app version and build, your operating system and processor type, a little technical context such as which thread it happened on, and a random install id — just enough to tell whether one machine crashed twelve times or twelve machines crashed once. Nothing else: no decklists, no game logs, no matches, no account, no email, and never the contents of your variables. The app strips identifying text out of every report, and refuses to send one that still looks identifying afterwards.
Unlike finished matches, this one you can turn off. Sending is on by default, but not a byte leaves your machine before the app has shown you a notice saying so — and that notice can switch it off on the spot. After that, Settings → Problem reporting turns off the sending, or the recording as well, whenever you like, and shows you the reports exactly as they would be sent.
A report we receive is deleted after 90 days. The error itself — exception type, our file and line, no id of any kind — we keep for a year, so we can tell whether a bug we fixed really stopped happening. Your IP address is never stored: the endpoint keeps only a salted hash of it, rotated daily, and only to stop someone flooding it. To have reports we already hold deleted, send us the install id shown in Settings → Problem reporting, at the address under Contact below, and we delete every report carrying it (the Copy latest button copies a whole report, id included). Deleting the app's configuration folder retires that id too: a new one is generated, and the two cannot be linked.
On your device (local copy) and on Cloudflare's infrastructure — account data in a database, game logs in object storage. Servers may be outside your country. Passwords are stored only as salted hashes, never in plain text.
From your account page you can export everything we hold for you, and permanently delete your account and its data, at any time. Deletion removes your account copy from our servers.
Being straight with you: deletion cannot reach the account-unlinked training copy, because nothing in it points back to you any more — that is also the reason it carries no privacy risk to you. We aim to comply with PIPEDA (Canada) and GDPR (EU).
SevenWins is not intended for children under 13 — or, if you are in the EU, the UK or another country with a higher age of digital consent, under 16. Please do not create an account if you are younger than that.
Questions? Email hello@sevenwins.gg.