MAGIC: THE GATHERING

COMPANION PRIVACY NOTICE

Effective Date: 30 January 2026

Last Updated: 30 January 2026

SUMMARY OVERVIEW

What we do Operate the Magic: The Gathering Companion App to support event registration, scorekeeping, match tracking, and gameplay features for players and organizers.
Who We Are Wizards of the Coast LLC (a Hasbro, Inc. Subsidiary) is the controller for Companion App Services
What We Collect Account details, player profile information (e.g., game history, store/event location), match results, gameplay preferences, and device/technical data)
Why we Use it To enable participation in events, track game history, personalize your experience, provide support, improve features, and meet legal obligations
Data Sharing With Hasbro affiliates, service providers, and tournament organizers as needed for app functionality or legal compliance.
Transfers Your data is transferred globally with appropriate safeguards (e.g. SCCs)
Contact Us Email: DPO@hasbro.com {Full details at the end of this Privacy Notice}


WELCOME!

The Magic: The Gathering Companion App (the “Companion App”) is a mobile application operated by Wizards of the Coast LLC, a subsidiary of Hasbro, Inc. (“Hasbro”). The Companion App is designed to help players participate in Magic: The Gathering events, track gameplay and match results, manage life totals, and connect with stores, organizers, and other players.

In this Privacy Notice, “Wizards,” “we,” “us,” or “our” refers to Wizards of the Coast LLC and, where applicable, its affiliated entities.

This privacy notice (“Privacy Notice”) applies to your use of:

  • The Magic: The Gathering Companion mobile application;
  • Event registration, pairings, standings, and match reporting features made available through the App;
  • Player profiles, including game history and event participation data;
  • Store, event, and location-based features enabled through the App; and
  • Related services and functionality that link to or reference this Privacy Notice.

This Privacy Notice explains how Wizards collects, uses, and shares personal data submitted by you or generated through your use of the Magic: The Gathering Companion App, including information associated with your player profile, event participation, gameplay history, and interactions with stores or event organizers through the App.

While much of the information collected through the Companion App relates to gameplay and event participation rather than commercial activity, it may still constitute “Personal Data” (as defined below) under applicable privacy laws. Accordingly, this Privacy Notice applies to such data to the extent required by law.

These practices are governed by and should be read in conjunction with the following program documents:

In the event of a conflict, this Privacy Notice controls only where required by applicable privacy law.

Wizards is the controller of any personal data collected and processed from your use of the Services.


Our EU Representative is:               Hasbro European Trading B.V.

                                                    De entrée 240, 1101 EE Amsterdam, NETHERLANDS

                                                    dataprivacy@hasbro.com


Our UK Representative is:             Hasbro UK Ltd.

                                                  4 The Square, Stockley Park, Uxbridge,

                                                  Middlesex, UB11 1ET UNITED KINGDOM

                                                  dataprivacy@hasbro.com


For privacy related matters and inquiries, please write to us at any of the addresses found in this notice, or email us at DPO@hasbro.com.


We ask you to take the time to read this Privacy Notice carefully.

If we collect and/or share Personal Data in a manner that differs from what is described in this Privacy Notice, we will notify you of the purposes for which Personal Data will be collected and/or with whom such Personal Data will be shared, whether via just-in-time notification at the point of collection or via an alternate notice.

If you are a California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah or Virginia, please see the “Additional State-Specific Disclosures” section below.

If you are in the EEA or United Kingdom, please see the “EEA/UK Annex” below. 


The Entertainment Software Rating Board’s Privacy Certified privacy compliance and certification program (“ESRB Privacy Certified”) is approved by the United States Federal Trade Commission (“FTC”) to serve as a Safe Harbor under the Children’s Online Privacy Protection Act (“COPPA”).  It permits participating members to display their seals to demonstrate compliance with established online information, collection, use and disclosure practices under COPPA and other United States data privacy laws.  This Privacy Notice and the ESRB certification seals shown on the Site confirm Wizards is a valid licensee and participating member of ESRB Privacy Certified.  To protect your privacy, we have voluntarily undertaken this privacy initiative and have had the Services reviewed and certified by ESRB Privacy Certified to meet established online information, collection, use and disclosure practices.  As a licensee of this privacy program, we are subject to frequent audits of the Services and other online products and services operated by us, and other enforcement and accountability mechanisms administered independently by the ESRB. 


TABLE OF CONTENTS

  1. Background
  2. Changes to this Privacy Notice
  3. What Information is Collected About Me
  4. With Whom Does Wizards Share My Information
  5. International Transfers of Personal Data
  6. How We Safeguard Your Personal Data
  7. How Long Do We Keep Your Personal Data
  8. Analytics and Advertising
  9. What are My Information Choices?
  10. State Specific Disclosures and Rights
  11. EEA/UK Annex
  12. Contact Us


BACKGROUND

We respect the privacy of our players and are committed to safeguarding any Personal Data processed in connection with the Companion App.

In the course of operating the App and providing its features, Wizards collects and uses certain Personal Data. We are responsible for handling that data in accordance with applicable data protection laws.

We use the following definitions in this Privacy Notice:          

 

User(s), You or Your: refers to individual players, event participants, or other users of Companion App, including those using the App to join events, track gameplay, or manage player profiles.
Personal Data means any information relating to an identified or identifiable living individual, such as a name, business email, account credentials, contact number, or other identifiers associated with that individual’s professional role.

This Privacy Notice applies solely to Personal Data and related information collected through the Companion App and other digital features or tools that link to this Privacy Notice. It does not apply to other data collection by Wizards, its parent company Hasbro, Inc., or their affiliates, including data collected offline or through unrelated websites, mobile applications, or third-party platforms.

For clarity, this Privacy Notice does not apply to any websites, mobile apps, or online services operated by third parties, including those that may be linked from within the Companion App. We encourage you to review the privacy notices of those third parties before providing them with your Personal Data or using their services.


BACK TO TOP


CHANGES TO THIS PRIVACY NOTICE

We encourage you to review this Privacy Notice periodically to stay informed about how Wizards collects, uses, and shares Personal Data in connection with your use of the Companion App.

We may update this Privacy Notice from time to time to reflect changes in our data practices, legal obligations, or operational needs. When updates occur, we will revise the “Last Updated” date at the top of the Privacy Notice. If a change materially affects how we process your Personal Data or significantly alters your rights, we will provide additional notice—such as via in-app messaging, push notification, or email (if contact details are on file).

Where required by law, we will seek your affirmative consent to material changes before they take effect.

By continuing to use the Companion App after such changes become effective (and, where applicable, after providing consent), you acknowledge and accept the updated Privacy Notice.


BACK TO TOP

WHAT INFORMATION IS COLLECTED ABOUT ME

Information That You Provide

To deliver the features and functionality of the Companion App, Wizards collects certain Personal Data directly from you. This includes information you provide when you:

a.  Create or sign in to your Wizards Account within the Companion App;
b.  Register for events using event codes or player IDs;
c.   Submit match results or report game outcomes;
d.  Set up or manage player groups and event preferences;
e.  Participate in in-app surveys, contests, or feedback requests;
f.  Contact Wizards Support through the App or other communication channels;
g.  Opt-in to receive push notifications or marketing communications (where applicable);
h.  Adjust your player profile, including avatar, display name, and preferred stores;
i.  Interact with tournament features, such as pairings, standings, and round timers; or
j.  Engage with social or store-connected features (e.g., store locator, shared play history).

We collect this information to operate the App, deliver requested services, personalize your experience, and support event participation. Depending on your location and the nature of the interaction, we may rely on your consent, our legitimate interests, the performance of a contract, or legal obligations to process this data.

We process this Personal Data under applicable legal bases (e.g. to fulfill our contract with You, to pursue legitimate interests, to comply with legal obligations, or based on Your consent where required). 

You may be unable to access the Services, or applicable parts of the Services, if Personal Data is not provided.

In relation to the Services and depending on how you choose to interact with the Services, We or our service providers, collect and process the following kinds of Personal Data about You:


  • Identity Data
Includes your name, username or display name, date of birth, country of residence, and Wizards Account login credentials.
  • Contact Data
Includes your email address and, if applicable, mailing address
  • Player Profile Data
Includes information associated with your Companion App profile, such as avatar, preferred language, gameplay preferences, saved player groups, and store/event associations.
  • Event and Participation Data
Includes event registration history, match results, tournament participation, store or geographic location of play, and group participation history.
  • Technical Data
Includes information automatically collected from your device, such as IP address, operating system, device type and ID, app version, crash reports, time zone settings, and session diagnostics.
  • Usage Data
Includes data about how you interact with the  Companion App—for example, the events you join, rounds completed, feature usage (e.g., life tracker), time spent in the app, and tapstream or navigation activity
  • Marketing and Communications Data
Includes your preferences for receiving marketing messages or notifications, as well as records of communication opt-ins, unsubscribes, and interaction with promotional content.
  • Profile Data
Includes your selected avatar, saved player groups, gameplay preferences, and optional demographic or feedback information you provide in-app or through  surveys.
  • Social Media and Integration Data
Includes information you choose to share from or with third-party platforms (such as Wizards Account SSO or event management tools), which includes your profile name, linked identifiers, or connected play history.


Information We Collect or Generate About Your Use of Companion App

When you use the Companion App, we collect or generate information related to your activity, interactions, and event participation. This includes:

  1. Information About Your Event Participation and App Usage

    We collect or generate Usage, Event, and Profile Data to track how you engage with the Companion App—for example, which events you join, how often you use features like the life counter or event timer, and which stores or event types you favorite. This helps us improve the app experience, personalize notifications, and understand player preferences.

  2. Information About Your Support and Feedback History

    We collect Contact and Profile Data when you submit feedback, respond to in-app surveys (such as post-event satisfaction polls), or contact our customer support team. This enables us to provide responsive service and improve the Companion App based on user feedback.

  3. Information About Your Broadcast and Store Engagement Activity

    If you favorite a store or receive broadcast messages from local organizers, we collect Profile and Communication Data related to these interactions. This includes which stores or event types you follow and whether you open or act on event reminders or store updates.


Information We Collect Automatically


When you use the Companion App, we and our service providers automatically collect certain technical and interaction data to support the App’s functionality, security, and performance (collectively, “Online User Activity”). This includes:

  • Your IP address and general location (e.g., country or region);
  • Device and operating system details (such as device type, OS version, model, and language settings);
  • App version, session start and end times, and feature usage (e.g., event registration, life tracker, store locator);
  • Mobile-specific data such as platform type (iOS or Android), app interaction patterns, and crash reports;
  • Aggregated analytics on how the App is accessed and used, such as feature engagement, screen flow, and session retention.


We collect this data to maintain stable and secure experience, troubleshoot technical issues, and improve app usability and player engagement over time.


Technologies We Use

We and our service providers use a range of technologies to collect and analyze information about how you interact with the Companion App (“Online User Activity”). These technologies help us deliver core functionality, measure performance, and improve the app experience. They include:


Device Identifiers and App Telemetry

We use mobile-specific identifiers and telemetry tools (such as Firebase or similar SDKs) to collect crash logs, usage statistics, and diagnostics data. This allows us to troubleshoot issues, monitor app health, and enhance feature performance.

In-App Tracking Technologies

The Companion App collects interaction data using built-in app telemetry (e.g., screen taps, feature usage, session duration). This data is collected in an aggregated or pseudonymized manner and used to understand how players engage with features like event registration, store favoriting, or life tracking.

Push Notification and Broadcast Tools

If you opt-in, we use push messaging frameworks to send reminders about events, prerelease alerts, or store announcements. These tools track notification delivery and basic engagement (e.g., opened vs. dismissed).

Marketing Retargeting (Limited)

If you opt-in to receive marketing communications, we use in-app activity (e.g., favoriting events or stores) to tailor promotions or reminders for upcoming releases. Companion App does not currently support third-party ad SDKs.


Information Collected from Other Sources

We combine the information you provide with additional data received from trusted sources, including:

  • Wizards Services and Linked Accounts
    If you sign in with your Wizards Account, we associate account-level data (e.g., name, date of birth, play region) with your Companion App profile.
  • Retailers and Event Organizers
    If you register for events or favorite local stores, we receive event participation or broadcast message history from affiliated organizers.
  • Third-Party Services
    Where permitted, we receive limited information from third-party tools that help us support the App (e.g., diagnostics, feedback, or messaging platforms). These third parties operate under their own privacy policies.

BACK TO TOP

WITH WHOM DOES WIZARDS SHARE MY INFORMATION

We share your Personal Data with the following categories of recipients, as needed to provide the Companion App and related services:

  • Wizards and Hasbro Group Companies

    We share your information with affiliated entities within the Wizards of the Coast and Hasbro corporate group to support core operations—such as hosting, internal analytics, player support, account authentication, and data governance.

  • Service Providers Acting on Our Behalf

    We engage third-party vendors under contract to perform services on our behalf. These providers access your Personal Data only as instructed by Wizards and are obligated to maintain appropriate security and confidentiality. These include

      • Cloud and Hosting Providers – to operate and maintain the App and backend systems;
      • Analytics Providers – to process app interaction and usage data (e.g., screen flow, session frequency, crash diagnostics);
      • Notification and Messaging Tools – to send push notifications, event reminders, or store broadcasts (if you opt in);
      • Survey or Feedback Tools – to collect post-event feedback and player satisfaction insights.

  • Independent Partners and Retailers

    If you choose to favorite a store, register for an event, or participate in local Organized Play, we share relevant player information (e.g., match results, participation status, store affinity) with event organizers or WPN retailers. These parties act as independent controllers and are responsible for their own use of your data.

  • Legal and Regulatory Disclosures

    We disclose Personal Data to government authorities, courts, or legal counsel where necessary to:

      • Comply with applicable laws, legal proceedings, or regulatory requirements;
      • Investigate or enforce potential violations of our terms, event policies, or Code of Conduct;
      • Prevent harm to users, employees, or the public.


Business Transactions

If Wizards undergoes a business transaction (e.g., merger, acquisition, or asset sale), your Personal Data will be transferred as part of that transaction, subject to applicable confidentiality and data protection obligations.


With Your Consent

We share your Personal Data with others when you have provided your explicit consent or where you take action that reasonably implies such sharing (e.g., opting in to store communications).

Social Sharing and External Services

While the Companion App is not a social network, it includes integrations with both Wizards-owned and third-party services that enhance event participation and player engagement.

  • Wizards Services

The Companion App connects with other Wizards-operated services—such as EventLink and the Store and Event Locator—to support event registration, match reporting, and store discovery. When you interact with these features, relevant Personal Data (e.g., your event registration, match results, and store preferences) is shared across linked systems under Wizards’ unified privacy governance. These services are covered by this Privacy Notice or other Wizards privacy documentation, as applicable.

  • Third-Party Platforms

The App also includes optional links or references to external platforms for community engagement. If you choose to interact with these services, any data you share with them will be governed by their own privacy notices, not this one.

We encourage you to review the privacy practices of any third-party platform before linking accounts or submitting personal information.

BACK TO TOP

INTERNATIONAL TRANSFERS OF PERSONAL DATA

The Site is operated by Wizards, a Hasbro company headquartered in the United States, and our players and operations are located around the world.  As a result, we collect and transfer Personal Data on a global basis.  This means Your Personal Data is transferred and processed in countries outside Your country of residence.  These countries may have data protection laws that differ from those in your country of residence.

Our primary services are located in the United States, and we also rely on group companies, service providers, and business partners that process Personal Data in the United States and other countries.  Whenever we transfer Your Personal Data internationally, we do so in compliance with applicable data protection laws and ensure that Your information is safeguarded appropriately.

For residents of the European Economic Area (EEA) and the United Kingdom, we implement appropriate safeguards for cross-border transfers, such as the use of Standard Contractual Clauses (SCCs), international data transfer agreements, or other lawful mechanisms approved under applicable law.

You can request more information about the safeguards we use by contacting us using the details provided in the How to Contact Us section below. 


BACK TO TOP


HOW WE PROTECT YOUR PERSONAL DATA

We use a combination of technical, organizational, and administrative safeguards to protect Your Personal Data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.  Measures We use include:

  • Encryption of data in line with industry standards.
  • Access controls that limit Personal Data access to employees or contractors with legitimate business need.
  • Identify verification procedures when you contact us about your account, transactions, or Personal Data, to help ensure that only you (or someone authorized by you) can access your information.
  • Periodic reviews of Our security practices to take account of new technologies and evolving threats.

If you create an account with us, it is your responsibility to keep your login credentials secure and confidential.  We recommend that you use a unique and strong password and update it regularly.

Please note that while we take reasonable steps to protect your Personal Data, no security system is completely secure.  In the unlikely event of a data breach affecting your Personal Data, we will notify you when required under applicable law.


BACK TO TOP


HOW LONG WE KEEP YOUR PERSONAL DATA

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law.

In general, we retain your data for as long as you have an active Wizards Account or continue to use the Companion App. We also retain data where we have a legitimate business need to do so, including:

  • Providing you with access to events, features, or store communications you’ve requested;
  • Complying with legal, regulatory, or tax obligations;
  • Responding to support requests, bug reports, or account-related issues;
  • Maintaining business, audit, or financial records;
  • Protecting the integrity of the Companion App and our user community. 


In some situations, we retain certain Personal Data even after account deletion or inactivity, such as:

  • To comply with applicable laws or law enforcement requests;
  • To maintain records of surveys;
  • To defend or assert legal claims;
  • To track and document user privacy rights requests (e.g., access, deletion);
  • To enforce our Code of Conduct—especially in cases involving violations that may warrant future access restrictions.

When we no longer have a valid reason to retain your data, we will delete it or render it non-identifiable. If immediate deletion is not feasible (for example, due to backup storage), we will securely store and isolate the data until deletion is possible.

Retentions Schedule

We retain Personal Data for different periods on the type of information and the purpose for which it is used. Our retention periods are:


Category of Personal DataExamples Retention Period
Account DataName, email address, login credentialsWhile account is active, and up to 2 years after deletion
Customer Support DataRequests, complaints, correspondence with support3 years after resolution of request
Marketing & Communications DataMarketing preferences, engagement with emailsUntil you withdraw consent or opt out
Legal/Regulatory DataRecords of data subject requests, legal claims, law enforcement inquiriesDuration of legal requirements or claim
Backup ArchivesSystem backups that include Personal DataRetained securely until automatically overwritten (typically within 12–24 months)



BACK TO TOP


ANALYTICS AND ADVERTISING

We use analytics to better understand how players use the Companion App, improve its features, and deliver more relevant updates, content, and promotions. While the Companion App does not currently support in-app advertising, we use certain data to tailor push notifications or communications and to support limited marketing activities, as described below.

App and Usage Analytics

We use tools such as Google Analytics for Firebase, or other mobile analytics SDKs, to collect aggregated information about how the Companion App is accessed and used. These tools collect data such as:

  • Your IP address, device type, operating system, and app version;
  • Feature usage (e.g., life tracker, event registration, store favoriting);
  • Time spent on the app, screen flows, and interaction patterns;
  • Crash reports and performance diagnostics.

This data helps us:

  • Improve the usability and stability of the Companion App;
  • Identify which features are most used or need enhancement;
  • Monitor app performance across devices and platforms;
  • Provide more relevant reminders and content.

Marketing Insights and Limited Retargeting

If you opt in to receive marketing communications, we use in-app behavior (e.g., stores you favorite or events you register for) to personalize reminders or promotional content within the App or future campaigns.

While the Companion App does not currently deliver personalized third-party ads or use behavioral advertising SDKs, Wizards uses aggregate Companion App data—alongside other Wizards products—to improve broader campaigns related to Magic: The Gathering.

Matched Audiences (If Applicable)

In limited cases, we create “matched audiences” by securely sharing hashed contact information (e.g., email addresses) with platforms like Meta or Google. These platforms use that data to show ads to users who already have a relationship with Wizards or have similar interests. These platforms do not receive access to your raw Personal Data and are required to use the information in accordance with their own privacy practices.


BACK TO TOP


What are Your Information Choices

You’re in control of your experience.

Through the Companion App and your Wizards Account, you can update your personal information, manage communication preferences, and exercise certain privacy rights. Some data needs to be retained for legal, operational, or security reasons—but wherever possible, you decide how your information is used.

Managing Your Account

If you have a Wizards Account linked to the Companion App, you can review or update your contact details, preferences, and profile information by signing into your account via https://myaccounts.wizards.com

To request permanent deletion of your Wizards Account and associated data, you may use our Account Deletion Request Form. Please note that available rights may vary depending on your country or region.

When contacting us, please specify that your request relates to the Companion App and include the email address associated with your account so we can verify your identity. For information on data we retain after deletion, see the section “How Long We Keep Your Personal Data.”

Promotional Communications

If you opt-in to receive marketing messages (e.g., prerelease reminders or store promotions), you can unsubscribe at any time by:

  • Clicking the “unsubscribe” link in the message;
  • Adjusting your marketing preferences in your Wizards Account settings; or
  • Contacting us directly using the information provided in the “Contact Us” section.

Even if you opt out, you might still receive important service-related communications (e.g., event confirmations, legal updates, or support responses).

Cookies and Tracking Preferences

While the Companion App does not use traditional web cookies, it does rely on mobile SDKs or tracking tools for analytics, crash reporting, and feature diagnostics. If available in your device’s operating system (e.g., iOS App Tracking Transparency or Android ad settings), you can manage permissions for certain types of data collection.

For more information on tracking technologies used in the App, see the section “Technologies We Use.”

Analytics and Interest-Based Advertising

Although the Companion App does not currently serve third-party ads, you still have control over certain types of analytics and marketing data, particularly if you interact with other Wizards platforms or opt into marketing communications.

Google Analytics (Web-Linked Services):  If you access Wizards services through a web browser that uses Google Analytics, you can opt out by installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout

Industry Opt-Outs for Advertising (Where Applicable): Some advertising networks we may partner with in the future participate in industry-wide opt-out programs. If you receive ads related to Wizards products on other websites or apps, you can manage your preferences at:

Note: These opt-outs limit targeted advertising by participating providers but do not eliminate ads entirely.

Matched Audience Advertising:  If you wish to opt out of “matched ads” based on shared identifiers (e.g., hashed email addresses used in marketing campaigns on platforms like Meta or Google), you may contact us directly at DPO@hasbro.com and specify that you want to opt out. You can also adjust your ad settings directly on the third-party platform.

Mobile Device Settings: You can manage certain ad and analytics preferences through your device’s privacy settings:

  • iOS: Settings > Privacy & Security > Tracking > Disable “Allow Apps to Request to Track”
  • Android: Settings > Google > Ads > Enable “Opt-out of Ads Personalization”

These controls affect how your device shares information with third-party apps and advertising SDKs.

Important Notes

Please note that opt-outs apply only to the specific browser or device you use. Wizards is not responsible for the effectiveness of third-party opt-out tools or programs.


Global Privacy Control (GPC) and Do Not Track (DNT)

Your browser may allow you to enable signals such as “Do Not Track” (DNT) or Global Privacy Control (GPC). While our Services do not currently respond to DNT signals, if we detect a GPC signal, we will interpret it as a request to opt out of the sale or sharing of your Personal Data for targeted advertising, in accordance with applicable law.

Children’s Information

A Note to Parents

Companion App is designed for a wide range of players but is not directed to individuals under 13 (“Children” or “Child”).  In general, Children may only access the Services if We have obtained verifiable parental consent in compliance with the U.S. Children’s Online Privacy Protection Act (“COPPA”) and other applicable children’s privacy laws. 

If you are a parent or guardian, we encourage You to review this Privacy Notice with your Child so they understand how the Services work and what information may be requested.  If You have questions about how we handle Children’s information, or about our compliance with COPPA, please contact us using the details in the Contact Us section.

Verifiable Parental Consent with K-ID

To help us manage parental consent, Wizards partners with K-ID, a third-party parental consent platform.

When a Child attempts to create an account with Us:

  1. They will be asked to provide their full date of birth and their country of residence;
  2. If their date of birth shows the Child is under the applicable age of digital consent in their jurisdiction, they will be prompted to provide a parent’s email address;
  3. The parent will then receive an email from K-ID with instructions to log in and complete the consent process through K-ID’s secure platform;
  4. Any information the parent provides during this process is collected, processed and stored by K-ID, in accordance with K-ID’s own privacy policy and practices;
  5. Once the parent has provided consent through K-ID, we will be notified that the parent has consented to the Child’s account creation and only then shall the Child be able to access the Services offered to our account holders.


Parents using K-ID will also:

  • Be notified if there are any material changes to the Services that affect their Child’s use;
  • Have the ability to review, modify or revoke consent at any time by logging into their K-ID account; and
  • Manage their Child’s account access and permissions securely through the K-ID platform.

For clarity, this consent process not only applies to Children under the U.S. COPPA rule, but also in other jurisdictions where local rules require parental authorization for minors to use online services.

Collection, Use and Sharing of Children’s Information

Only with verifiable parental consent will we collect, use and disclose Children’s Personal Data, or when a parent or guardian provides the Personal Data directly.

  • During account registration, users must provide their date of birth.  Users identified as minors under applicable law are taken through the parental consent process described above.
  • Parents may consent to our internal use of their Child’s information while prohibiting disclosure to third parties (except where necessary to operate the Services).
  • In some cases, we collect limited information without parental consent, for example, persistent identifiers, such as IP addresses or cookies, used solely to support the internal operations of the Services.


If we discover that we have collected Children’s Personal Data in violation of applicable law, we will promptly delete it.


Parental Access and Control

If you are a parent or guardian who has given consent, you may, at any time:

  1. Review, correct or delete your Child’s Personal Data; and/or
  2. Withdraw consent and request that we stop collecting, using or sharing your Child’s Personal Data.

To exercise these rights, you may log into your K-ID account to manage your Child’s access or contact us through the Contact Us section.  To help verify your request, please include your Child’s name and email address, your own name and email address, and the area of the Services your Child registered with.


BACK TO TOP


U.S. STATE SPECIFIC DISCLOSURES AND RIGHTS

This section describes the additional privacy rights and disclosures that apply to residents of certain U.S. states.  Currently, these include (but are not necessarily limited to) California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Jersey, Oregon, Texas, Utah and Virginia.  (We anticipate adding more states over time.

Under state privacy laws (such as California’s CCPA/CPRA and the privacy laws of the states listed above), residents have enhanced rights over their Personal Data – including the rights to access, correct, delete, or opt-out of certain processing (such as targeted advertising or sharing).

Notice of Collection

We, or our service providers acting on our behalf, collect the categories of Personal Data described throughout this Privacy Notice in connection with your use of the Companion App and related Wizards services. These include:

  • Identifiers – such as your name, email address, IP address, device ID, and Wizards Account credentials;
  • Contact Data – such as your preferred email and, if applicable, mailing address or phone number;
  • Event and Participation Data – such as stores you favorite, events you register for, and match results;
  • Technical and Device Information – including your operating system, device model, app version, IP address, and crash diagnostics;
  • Approximate Geolocation Data – such as your country or city, derived from your device or IP address, to support store/event recommendations;
  • Usage and Interaction Data – including features you use (e.g., life tracker, event tools), time spent in app, and navigation flows;
  • Inferences – drawn from your in-app behavior, such as event type preferences or engagement patterns (e.g., prerelease participation or store loyalty).


Where required by applicable law (e.g., the California Consumer Privacy Act/CPRA), we will provide information covering at least the 12-month period preceding your request—or longer, where legally required or permitted.

To learn more about the types of data we collect and how we use them, please refer to the section above titled “What Information We Collect.”

The Companion App does not currently engage in “cross-context behavioral advertising” as defined under the California Privacy Rights Act (CPRA). However, certain U.S. state laws may provide you with additional rights to opt out of specific data uses or disclosures. See the section “Your State Privacy Rights” for details.


Right to Opt-Out

Under certain state privacy laws, you have the right to opt-out of:

  • The sales or sharing of your Personal Data to third parties for advertising purposes,
  • Targeting advertising (or combining Your data across services for ad purposes), or
  • Certain profiling or automated decision-making for marketing.

If applicable, you may submit a request to opt-out via our online-opt out Form. Once you opt-out we will cease sharing your data with relevant advertising partners for those purposes.

If you are an account holder, you may, sign into your account, navigate to “preferences” and check the appropriate box.


Right to Access, Correct, or Delete Your Information

As a resident of a state with applicable privacy law, you have the right to request:

  • The categories of Personal Data we have collected about you;
  • The sources from which we collected that information;
  • The categories of Personal Data disclosed for a business purpose;
  • The third-parties to which we disclosed Personal Data;
  • The purposes for which we collected or disclosed such information; and
  • The specific pieces of Personal Data we hold about you.


You may also request that we correct inaccuracies or delete your Personal Data (subject to certain legal exceptions). 

To submit a request, please use our toll-free number (if applicable), our online Form, or email us  at dpo@hasbro.com .  In your request, please specify which right You are exercising and provide sufficient information to help us verify your identity.  We aim to acknowledge receipt within 10 business days and respond within 45 days (with possible extension of another 45 days in certain cases).

If we cannot verify Your identity or the request does not meet legal criteria, we reserve the right to deny the request.

Appeals Process

If we deny your request in whole or in part, you may have the right to appeal our decision under state privacy laws (e.g. Colorado, Connecticut, Virigina) by emailing Us at DPO@hasbro.com.  To the extent possible, please describe the basis for your appeal.  We will endeavor to provide a prompt response.  If we deny your appeal or you remain unsatisfied, you also have the right to contact your state’s Attorney General.

Authorized Agent

You can designate an authorized agent to submit requests on your behalf.  However, we will require written proof of the agent’s permission to do so and verify your identity directly with you.

Minor’s Data

We do not knowingly sell or share the Personal Data of minors without verifiable parental consent.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights, and we do not discriminate against anyone for exercising such rights.

California Residents – SHINE THE LIGHT

Since 2005, California Civil Code Section 1798.83 permits users who are California residents to request certain information regarding Our disclosure of personal information to third-parties for their direct marketing purposes.  If you have any questions regarding our disclosure policy, however, please contact us at:


Hasbro, Inc.

Attn: App Administrator

1027 Newport Ave., Mailstop A906

Pawtucket, RI 02861

(800) 255-5516

Or

Wizards of the Coast

Attn: Customer Support

P.O. Box 707

Renton, WA 98057-0707

(800) 324-6496



BACK TO TOP


EEA/UK/Swiss Annex

This annex provides additional disclosures for individuals who reside in the European Economic Area (EEA), Switzerland (Swiss) or the United Kingdom (UK).

Your Rights

If You are located in the EU, Switzerland or the UK, you have the following rights in relation to your Personal Data:

  • Right of access: to request information about how we process your Personal Data and obtain a copy of the data we hold about you.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn or processing carried out on other lawful bases.
  • Right to data portability: in some circumstances, to receive certain Personal Data you provided in a structured, commonly used, and machine-readable format, and/or request that we transmit it to another controller (where technically feasible).
  • Right to rectification: to request correction of inaccurate or incomplete Personal Data.
  • Right to erasure: to request deletion of your Personal Data in certain circumstances. Please note that in some cases we may be legally entitled to retain it.
  • Right to restrict processing: to request that we limit our processing in certain circumstances.
  • Right to object: to object to processing in certain circumstances, including for direct marketing purposes (You may opt out of marketing at any time).
  • Right to lodge a complaint: to complain to your local supervisory authority if you are unhappy with how we process your Personal Data.

To exercise any of these rights, please use Our Form or contact Us using the details in the Contact Us section.


Our Legal Bases for Processing

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, Wizards only processes your Personal Data where permitted by law. The legal basis will depend on the nature of the data and how you interact with the Companion App. These bases include:

  • Performance of a Contract
    When processing is necessary to provide the Companion App and related services you request—for example, creating a Wizards Account, registering for events, displaying match results, or sending store notifications based on your preferences.
  • Consent
    Where required by law, we rely on your consent to process certain types of data—such as sending marketing communications, enabling push notifications, or collecting location data to recommend nearby events or stores. You can withdraw consent at any time using in-app controls or by contacting us.
  • Legitimate Interests
    We may process your Personal Data where necessary to support core business functions, provided this does not override your privacy rights. These include activities like improving app performance, conducting analytics, preventing fraud or abuse, and personalizing in-app experiences.
  • Legal Obligation
    We process data where required to comply with applicable legal or regulatory obligations, such as safeguarding children's privacy, responding to lawful requests, or complying with data security or consumer protection laws. 
  • Vital Interests
    In rare cases, we may process your data to protect your vital interests or those of another person—for example, in emergencies involving safety, health, or security.


A detailed table mapping purposes, types of data, and lawful bases is included below to ensure transparency.

Purpose/Activity Types of Data Lawful Basis for Processing Including Basis of Legitimate Interest
Provide access to the Companion App, including registering a Wizards Account and enabling event and gameplay features

  • Identity
  • Contact

  • Performance of a contract with you
  • Legitimate interests (to enable access to app functionality)

Process and deliver event participation or store engagement (e.g., match entry, store favoriting)

  • Identity
  • profile
  • Usage
  • Event Participation

  • Performance of a contract with You.
Manage your relationship with us, including account preferences, notifications, and support

  • Identity
  • Contact
  • Profile
  • Usage
  • Marketing and Communications

  • Performance of a contract
  • Legal obligation
  • Legitimate interests (customer service)
Analyze use of the Companion App to improve performance and features

  • Technical
  • Usage
  • profile
  • Event Participation

  • Legitimate interests (to study usage, troubleshooting issues, and improve the app)
Deliver personalized event reminders and in-app messaging (e.g., pre-release alerts, store broadcasts)

  • Identity
  • profile
  • Usage
  • Marketing and Communications

  • Consent (where required)
  • Legitimate interests (to support Organized Play and user engagement)
Send promotional communications and marketing content

  • Identity
  • Contact
  • Profile
  • Marketing and Communications

  • Consent (where required by law)
  • Legitimate interests (marketing related to Magic: The Gathering products or events)
Protect the Companion App and user community (e.g., fraud detection, abuse monitoring)

  • Identity
  • Profile
  • Contact
  • Technical
  • Usage

  • Legal obligation
  • Legitimate interests (to ensure integrity and prevent misuse)
Respond to legal requests or enforce our Code of Conduct

  • Identity
  • Contact
  • Usage
  • Profile
  • Communications

  • Legal obligation
  • Legitimate interests (compliance and enforcement)

Maintain backups and business continuity systems

  • Technical
  • Transaction
  • Identity

  • Legitimate interests (for IT support and disaster recovery)
Retain records for legal compliance

  • Identity
  • Contact

  • Legal obligation
Share information in the context of a corporate transaction (e.g., merger, acquisition)

  • Identity
  • Contact
  • Profile
  • Usage

  • Legitimate interests (business reorganization or transfer of services)
Protect vital interests (e.g., emergencies impacting user safety or security)

  • Identity
  • Contact
  • Technical
  • Usage

  • Vital interests (to protect life, health, or safety))


This chart reflects the primary processing purposes and lawful bases relevant to the Companion App under the GDPR/UK GDPR. Depending on your jurisdiction, additional rights or obligations may apply.


International Transfers

Because the Companion App is part of a global service operated by Wizards, your Personal Data will be transferred outside of your country of residence—including to the United States, where our primary servers and many of our service providers are located.

We rely on the following safeguards for such transfers:

  • Adequacy decisions: where the destination country has been formally recognized by the European Commission or the UK government as providing an adequate level of protection.
  • Standard Contractual Clauses (SCCs): where no adequacy decision exists, we use SCCs approved by the European Commission or UK Secretary of State to ensure Your Personal Data remains protected.

You may request further information about these safeguards (including a copy of the SCCs) by contacting us as described in Contact Us.



BACK TO TOP


CONTACT US

If You have a privacy-related inquiry—including questions about this Privacy Notice, how Wizards processes your Personal Data, how to exercise your rights, or if you require this Privacy Notice in an alternative format due to disability—you can contact us using these details below.

-----

Residents of the United States and Canada


Mailing Address


Wizards of the Coast LLC

Attn: Privacy Legal

P.O. Box 707

Renton, WA 98057-0707


Or


Hasbro, Inc.

Attn: Privacy Legal

1027 Newport Ave, Mailstop A906

Pawtucket, RI 02861


Email Address: DPO@hasbro.com

Telephone: (800) 324-6496

We are available Monday through Friday, from 9:00am – 6:00pm Pacific Time, and also on weekends from 10:00am – 4:00pm Pacific Time.


As aforementioned, Wizards is a license of the ESRB’s Privacy Certified Program.  If you believe we have not responded to your privacy-related inquiry or your inquiry has not been satisfactorily addressed, please contact the ESRB at https://www.esrb.org/privacy/contact


ESRB: privacy@esrb.org


-----


Residents of the United Kingdom

Mailing Address


Hasbro Consumer Affairs Department

PO Box 43

Newport

Gwent NP19

United Kingdom

Phone: +1(425) 204-8069

To get in touch with our Data Protection Officer, please contact us at DPO@hasbro.com


 ----


Residents of Switzerland and the EEA


Mailing Address:

Hasbro Promotions International B.V.

De Entrée 240

1011 EE Amsterdam

The Netherlands

Email address: dataprivacy@hasbro.com

Data Protection Officer: DPO@hasbro.com

Phone: +1(425) 204-8069