Privacy Policy

• Account info — your email address and name when you sign up
• Discord account — if you sign in with Discord or use Brew on Discord: your Discord user ID, username, avatar, and email address if Discord shares one
• Conversations — the decklists and messages you send, and Cauldron Familiar's replies, so a workshopping session can be picked back up later
• Payment info — handled entirely by Stripe; we never see or store your card details
• Usage data — your Food balance and how much of it each reply cost
• Contact form submissions — the email and message you send us via the contact page
• IP address — briefly, to prevent abuse of login, password-reset, and contact-form endpoints; not tied to your account or stored long-term

Brew only works for Discord accounts linked to a Cauldron Familiar account. When you talk to Brew on Discord — with /brew, or in the thread or DM where that conversation continues — we store your messages and Brew's replies as part of your conversation, the same as on the web, along with the ID of the Discord channel or thread it happened in so the conversation can continue there.

Other people can post in the threads Brew creates. Brew only replies to, and only stores messages from, the person the conversation belongs to. Anyone else's messages there are read only to tell whether they're meant for Brew, and aren't stored beyond a short queue (about a minute and a half) while Brew finishes a reply. If Brew was briefly offline, it also re-reads the most recent messages in your conversation threads so nothing you sent in the meantime gets missed, acting only on yours.

We use your data to provide the service — authenticating you, running your conversation through Claude and Scryfall, fulfilling Food purchases, and showing your conversation history. We do not sell your data or use your conversations to train AI models.

• Anthropic — processes your messages and decklists to generate Cauldron Familiar's replies
• Scryfall — receives card names/search queries to verify card details; we don't send it any personal or account information
• Moxfield and Archidekt — when you share a deck link, we fetch that deck from them; EDHREC and Commander Spellbook receive card and commander names for synergy and combo lookups. None of them receive personal or account information
• Discord — if you use Brew on Discord, your messages to Brew and its replies pass through Discord, under Discord's own privacy policy
• Stripe — handles payment processing
• Neon — hosts our database
• Vercel — hosts the application, and screens sign-ups and sign-ins for automated abuse (Vercel BotID, which checks signals from your browser when you submit the form)
• Resend — sends transactional email on our behalf (password-reset links, contact-form notifications)
• Sentry — error tracking; for a sample of sessions (and any session where an error occurs) it records a replay of on-screen interactions to help us diagnose bugs, with text and media masked by default

Conversations are stored as long as your account is active so you can resume them later. You can delete any conversation at any time from the sidebar — this permanently and immediately deletes it, including any photos you attached. Deleting a conversation that happened on Discord removes our copy; the messages themselves stay on Discord until you delete them there. Account data, including a linked Discord account, is retained until you delete your account, which you can do yourself at any time from your Account page. That permanently deletes your account, conversations, decks and photos.

You can request access to, correction of, or deletion of your personal data at any time by emailing us. We will respond within 30 days.

We use a single session cookie to keep you logged in. No tracking or advertising cookies.

Questions? Email devon.noeldetilly@gmail.com.