Tag Tutor is a free, non-commercial hobby project operated from Switzerland and is subject to the revised Swiss Federal Act on Data Protection (revFADP / nFADP). This page explains what data is processed when you use the site. The operator is identified in the Imprint.
To understand how the tool is used, the site records anonymous usage events: the oracle tags you search for, the color identity you select, the number of results returned, which cards you click, and the domain of the website that referred you. These events contain no account, no name, and no IP address, are never linked across visits, and cannot be used to identify you. There is no advertising, profiling, or cross-site tracking.
Like any website, the hosting infrastructure automatically records technical access data such as your IP address, browser type, and the time of your request in order to operate the service securely. The site is hosted by cyon (Switzerland), whose servers delete these raw access logs daily, so the data they contain is at most about 24 hours old. From these logs the host also compiles aggregated visitor statistics (using AWStats, for example country of origin, browsers, and IP-address statistics), which are retained on an ongoing basis until deleted. This technical data is used only for security, operation, and understanding overall traffic, and is not combined with the usage analytics above.
The site sets a single strictly-necessary session cookie that is required for security (protection against cross-site request forgery). No tracking, analytics, or advertising cookies are used, so no cookie-consent banner is required under Swiss law.
Card images and links are served directly by Scryfall; when images load, your browser contacts Scryfall, which receives your IP address under their privacy policy. No personal data is ever sold or shared for marketing.
We use privacy-friendly, cookieless, anonymous analytics to understand aggregate usage and keep the site healthy. We set no tracking cookies, store no personal data, and never identify you across days or sites. We honor the Do-Not-Track and Global Privacy Control browser signals. If your browser sends either, we record nothing.
Under the revFADP you may request access to, correction of, or deletion of any personal data concerning you, and object to its processing. Because the in-app analytics are anonymous, they cannot be tied to an individual, but you can exercise these rights regarding access logs by contacting the operator via the Imprint.