Privacy Policy

1. Who We Are and Who This Policy Covers

ManaBurned ("ManaBurned", "we", "us", "our") is a Magic: The Gathering card price comparison platform operated in Canada. This Privacy Policy applies to all visitors of manaburned.com and its subdomains.

This policy is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. Person Responsible for Personal Information Protection

We have designated a person responsible for the protection of personal information:

All privacy requests, inquiries, and complaints should be directed to this contact.

3. What ManaBurned Does

ManaBurned aggregates publicly available product listings and pricing data from game stores across Canada and the United States. Our service is entirely read-only: you can search cards and compare prices without creating an account or providing any personal information. We do not process purchases, store payment details, or act as an intermediary in any transaction.

4. Personal Information We Collect

4.1 Technical data collected automatically

When you visit ManaBurned, our servers automatically record standard access log data, including:

• Your IP address
• Browser type and version
• Operating system
• Pages visited and time of visit
• Referring URL (the page you came from)
• HTTP request and response codes

While we do not use this data to identify you personally, IP addresses may qualify as personal information under Canadian privacy law. We treat them accordingly.

4.2 Information you provide voluntarily

If you contact us by email at contact@manaburned.com, we will collect your email address and the content of your message. We have no contact form on the website — all contact is through direct email.

4.3 What we do not collect

We do not collect names, postal addresses, phone numbers, payment or financial information, social media identifiers, geolocation data beyond IP-derived country, or any biometric data.

5. Cookies and Tracking

ManaBurned does not use advertising cookies, analytics cookies, or any third-party tracking pixels (no Google Analytics, Meta Pixel, or similar).

We may set strictly essential session cookies to support the technical operation of the site (for example, for security or caching purposes). These cookies do not track your activity across other websites and do not require your consent under PIPEDA.

For full details, see our Cookie Policy.

6. Purposes and Legal Basis for Processing

We do not use personal information for automated decision-making that would produce legal or similarly significant effects.

7. Cross-Border Data Transfers

ManaBurned is hosted on infrastructure provided by Railway Technologies Inc. (railway.app), a company operating servers in the United States. Server logs and operational data may be processed on US-based servers.

Under PIPEDA, cross-border transfers of personal information must be subject to comparable protections. We rely on Railway's standard data processing terms for these protections. For details about Railway's security practices, see railway.app/legal/privacy.

By using ManaBurned, you acknowledge that your technical data (including IP address) may be processed in the United States.

8. Data Retention

We apply the principle of data minimization and delete or anonymize personal information once it is no longer needed for the purpose for which it was collected.

9. Your Privacy Rights

Under PIPEDA and applicable provincial privacy legislation, you have the following rights:

• Right of access: You may request confirmation of whether we hold personal information about you and receive a copy of it.
• Right to correction: You may request that inaccurate, incomplete, or ambiguous information be corrected.
• Right to deletion: You may request deletion of personal information collected from you, subject to our legal and contractual obligations.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without penalty, subject to legal or contractual restrictions and reasonable notice.
• Right to lodge a complaint: You may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe we have handled your personal information contrary to applicable law.

To exercise any of these rights, use our Privacy Request Form or email us directly at contact@manaburned.com. We will acknowledge your request within 10 business days and respond fully within 30 days.

10. Office of the Privacy Commissioner of Canada (OPC)

Canadian residents may contact the OPC directly to file a complaint or obtain information:

11. Rights for US Residents

Depending on your state, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), Virginia's Consumer Data Protection Act (CDPA), Colorado's CPA, or other state privacy laws.

Given that we collect only standard server log data and do not sell personal information to any third party, most state-law rights are not practically applicable to your use of ManaBurned. Nonetheless, we are committed to honoring privacy rights regardless of jurisdiction. Direct any requests to contact@manaburned.com.

We do not sell personal information.

12. Security

We implement reasonable technical and organizational safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. These include:

• HTTPS encryption for all web traffic
• Access controls on server and database infrastructure
• Regular review of data access permissions

No internet transmission is completely secure. We cannot guarantee absolute security, but we will notify affected individuals and the relevant privacy commissioner without delay if we become aware of a breach that presents a real risk of significant harm, as required by PIPEDA.

13. Children's Privacy

ManaBurned is not directed at children under 13, or under 16 where required by applicable law. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child, please contact us immediately at contact@manaburned.com and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page will reflect the most recent revision. For material changes, we will make reasonable efforts to provide prominent notice. Continued use of ManaBurned after changes are posted constitutes your acceptance of the updated policy.