Legal
Privacy Policy
Last updated: June 4, 2026
Overview
Storm Count ("we", "the site") is a free Magic: The Gathering guessing game available at stormcount.gg. This policy explains what data we collect, why, and your rights over it. We collect the minimum data needed to run the game.
Data We Collect
Account data (optional)
Account creation is optional. If you sign up, your email address and display name are stored by Clerk (our authentication provider) — not by us. We never store your email address in our own database. We receive only your Clerk user ID and display name to associate scores with your profile and display them on leaderboards.
Game scores
When you complete a Daily Challenge or Survival run (whether signed in or not), your score and the date are stored in our database. If signed in, your score is linked to your account so it appears on your profile and the public leaderboard. Anonymous scores are recorded without any user identifier.
Technical logs
Our hosting provider (Vercel) may log standard HTTP request metadata (IP address, user-agent, timestamp) for security and abuse prevention. These logs are retained per Vercel's own data retention policy and are not used for advertising.
Cookies & Local Storage
We use the following browser storage:
- ▸Cookie consent (localStorage) — records your accept/reject choice so the banner doesn't reappear. Key:
sc-cookie-consent. Never sent to our servers. - ▸Clerk session cookies — if you sign in, Clerk sets encrypted session cookies to keep you authenticated. These are essential and cannot be rejected without logging out.
- ▸Theme preference (localStorage) — stores your light/dark/system preference locally so your chosen theme persists across visits.
We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies.
Third-Party Services
- Clerk
Handles user authentication. Your email address and credentials are stored exclusively by Clerk under their privacy policy. Storm Count's own database stores only your Clerk user ID and display name — never your email address.
- Neon / Vercel Postgres
Our database provider. Game scores, leaderboard entries, and daily seeds are stored here. Data is hosted in the EU (or the region closest to you) and encrypted at rest.
- Scryfall
Card names, mana values, and artwork are fetched from the Scryfall public API. Your browser may make direct requests to Scryfall image CDN endpoints to load card art. Scryfall has their own privacy policy.
- Vercel
Storm Count is hosted on Vercel. Vercel may process request logs and edge telemetry per their privacy policy.
Data Retention
- ▸Game scores are retained indefinitely to power leaderboards.
- ▸Account data is retained until you delete your account via Clerk.
- ▸localStorage entries are cleared when you clear your browser's site data.
Your Rights (GDPR)
If you are in the European Economic Area or UK, you have the right to:
- ▸Access — request a copy of data we hold about you.
- ▸Rectification — correct inaccurate data (e.g., display name via Clerk profile).
- ▸Erasure — request deletion of your account and associated scores. Contact us below.
- ▸Withdraw cookie consent — clear
sc-cookie-consentfrom localStorage in your browser developer tools at any time.
Anonymous game scores cannot be attributed to you and therefore cannot be deleted individually. If you played while signed in, your scores can be removed on request.
Contact
Privacy questions or data requests — use the contact page. We will respond within 30 days.