Privacy Policy

Effective Date: January 3, 2026

Icarian (“Icarian,” “we,” “us” or “our”) recognizes the importance of protecting the privacy of our online visitors. It is our intent to balance our legitimate business interests in collecting and using information received from and about you with your reasonable expectations of privacy. The following privacy policy (“Privacy Policy”) is the way we handle information learned about you from your visits to our website available at https://icarian.app (the “Service”).

PLEASE REVIEW THIS PRIVACY POLICY CAREFULLY. When you submit information to or through the Service, you consent to the collection and processing of your information as described in this Privacy Policy. By using the Service, you accept the terms of this Privacy Policy and our Terms of Use, and consent to our collection, use, disclosure and retention of your information as described in this Privacy Policy. We, and our Service visitors, are bound by laws in the United States. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY, YOU ARE NOT AUTHORIZED TO USE THE SERVICE.

Intended Audience

The Service is intended for users located in the United States. By using the Service, you acknowledge that your information will be processed in the United States in accordance with this Privacy Policy and applicable U.S. laws.

Information We Collect

Information You Provide

When you create an account and use Icarian, we collect information you provide directly, including:

• Account Information: Your email address, username, password (stored in encrypted form), timezone preference, and optional profile avatar.
• Collection Data: Information about your Magic: The Gathering card collection, including cards you own, their condition, finish, and tradeable status.
• Deck Information: Commander deck configurations, deck names, card lists, and brewing preferences such as deck gameplans.
• Price Alerts: Cards you are monitoring and your target price preferences.
• Import Data: Files you upload to import collection data, such as CSV exports from other services.
• Preferences: Your communication preferences (such as weekly digest settings) and display preferences.
• Feedback: Bug reports, feature requests, and other feedback you submit through the Service.

Information Collected Automatically

Information about your device hardware and software is automatically collected by Icarian when you use the Service. This information may include: your IP address, browser type, domain names, access times, geographic location, referring website addresses and other technical information such as protocol status and sub-status, bytes sent and received, and server information. We may also collect information about how you interact with the Service. This information is used by Icarian for its business purposes, including for the operation and improvement of the Service, for technical troubleshooting, to maintain quality of the Service and to provide general statistics regarding use of the Service.

Public Profile Information

Certain information you provide may be visible to other users of the Service. Your username, collection statistics, and deck information may be viewable by others through your public profile page. We recommend being mindful of this when choosing your username and the information you share.

Cookies and Other Information Collection Tools

What are cookies? A cookie is a small file containing a string of characters that is sent to your computer when you visit a website or use an online service. When you visit the website or use the service again, the cookie allows that website or online service to recognize your browser or device. Cookies may store unique identifiers, user preferences and other information.

Why do we use them? Cookies help us improve the Service by providing us with information about which parts of the Service are most popular, enabling us to analyze technical and navigational information about the Service, and helping us to detect and prevent fraud. We also use cookies and other data collection tools (such as web beacons and server logs) to help improve your experience with the Service. For example, we use analytics services to help analyze how users use the Service. These tools use cookies to collect standard Internet log information and visitor behavior information in an anonymous form. The information generated by the cookie about your use of the Service (including IP address) is transmitted to our data collection tool service providers. This information is then used by us to evaluate visitors’ use of the Service and to compile statistical reports on website activity for Icarian.

How do I control cookies? Web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to manage and delete cookies, visit www.allaboutcookies.org. Some web browsers provide settings that allow a user to reject cookies or to alert a user when a cookie is placed on the user’s computer, tablet or mobile device. Most mobile devices also offer settings to reject mobile device identifiers. Although users are not required to accept cookies or mobile device identifiers, blocking or rejecting them may prevent access to some features available through the Service.

Third-Party Service Providers

We use third-party service providers to help operate and improve the Service. These providers may have access to certain information in order to perform their functions:

• Email Services: We use a third-party email service provider to send transactional emails (such as password resets) and optional communications (such as weekly digests). This provider receives your email address and email content.
• File Storage: Uploaded files, such as CSV imports, are stored using a third-party cloud storage provider.
• Content Delivery: We use content delivery networks (CDNs) to serve static assets. These providers may collect standard server logs including IP addresses.
• Error Tracking: We use an error tracking service to identify and fix technical issues. When errors occur, this service may receive technical information about the error, including your user identifier if you are logged in, the URL where the error occurred, and related diagnostic data.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you request deletion of your account, we will delete or anonymize your information within a reasonable timeframe, except where we are required to retain certain information for legal or legitimate business purposes.

Import files you upload are automatically deleted after 90 days. We may retain backup copies of data for a reasonable period to ensure data integrity and disaster recovery.

Aggregated and Anonymous Data

We may create aggregated or anonymous data from your information by removing identifying details. This anonymized data may be used to improve the Service, develop new features (such as card recommendations and deck building suggestions), analyze usage patterns, and for other legitimate business purposes. Aggregated or anonymous data is not considered personal information and may be used and shared without restriction.

Security

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Children’s Privacy

Icarian is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible. If you believe we have inadvertently collected information from a child under 13, please contact us at [email protected].

Account Deletion

You may request deletion of your account and associated personal information by contacting us at [email protected]. Upon receiving your request, we will verify your identity and delete your account and personal information within a reasonable timeframe. Some information may be retained as required by law or for legitimate business purposes such as fraud prevention.

For California Residents: CCPA Information

This Privacy Notice for California Residents supplements the information contained elsewhere in this Privacy Notice and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this notice.

Rights and Choices

The CCPA provides consumers located in the state of California with certain rights regarding their personal information and data. The following section describes those rights and explains how to exercise them:

Access to Specific Information and Data Portability Rights

You have the right to request that the company disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (as described in the section “Exercising Access, Data Portability, and Deletion Rights”), we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called data portability request)
• If we sold or disclose your personal information for a business purpose, two separate lists disclosing:
  • Sales, identifying the personal information categories that each category of recipient purchased, and
  • Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level of quality of goods or services.

Any CCPA-permitted financial incentive we offer will reasonably relate to your value and contain written terms that describe the program’s material aspects.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us at [email protected].

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access of data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Information We Collect

Our websites, emails (with your consent, where required by law), and other products, services and platforms collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, our websites, apps, emails, and other products, services and platforms may have collected the following categories of personal information from its consumers within the last twelve (12) months:

Personal information does not include:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.
• Information excluded from the CCPA’s scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to ask a question about our products or services, we will use that personal information to respond to your inquiry.
• To provide, support, personalize, and develop our websites, emails, and other products, services and platforms.
• To create, maintain, customize, and secure your account with us.
• To provide you with support and to respond to your inquiries, including investigating and addressing your concerns and monitoring and improving our responses.
• To personalize your website, apps, emails, or other product, service or platform experience and to deliver content and product and service offerings relevant to your interests.
• To help maintain the safety, security, and integrity of our websites, apps, emails, and other products, services and platforms, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our websites, apps, emails, and other products, services and platforms.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by the Company about our Website users is among the assets transferred.

The Company will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Sharing Personal Information

The Company may disclose your personal information to a third-party for a business purpose, subject to your right to opt-out of those sales (see ‘Sales of Personal Information’ below). When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

We may share your personal information with the following categories of third parties:

• Subsidiaries and affiliates.
• Contractors and service providers.
• Data aggregators.

Sales of Personal Information

Icarian does not sell your personal information.

Links to External Websites

Our Service may contain links to third party websites. Any access to and use of such third party websites is not governed by this Privacy Policy, but is instead governed by the privacy policies of those third party websites, and we are not responsible for the information practices of such third party websites.

Do Not Track

Our Service does not currently take any action when it receives a Do Not Track request. Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For details, including how to turn on Do Not Track, visit https://allaboutdnt.com/.

Questions

If you have any questions regarding this Privacy Policy, please contact us at [email protected].

Notification of Changes

Any changes to our Privacy Policy will be posted to this page so users are always aware of the information we collect and how we use it. Accordingly, please refer back to this Privacy Policy frequently as it may change.