SpikeLab plugin privacy
Effective October 3, 2026. This notice covers the SpikeLab integration in ChatGPT and other compatible MCP clients.
Data the plugin uses
Public archetypes, published decklists, and MTGO tournament summaries are available without connecting an account. Tool requests include your selected filters, dates, card searches, and pagination.
When you connect SpikeLab, we store the authorization grant, approved permissions, and tokens needed to maintain the connection. Authorized tools can return your account ID and display name, decks you own or can access through a team, and collection printings, finishes, and quantities. Collection updates persist the exact quantity you request.
SpikeLab receives the arguments sent to its tools. It does not receive your entire ChatGPT conversation through this integration. Your SpikeLab password is entered on SpikeLab, and is not supplied to the plugin client.
Use and sharing
We use this data to authenticate you, enforce permissions, answer tool requests, and save collection changes. Results from authorized tools are sent to the connected client, including OpenAI when you use ChatGPT. OpenAI handles those results under its own policies; review them before sharing private deck or collection data in a conversation.
SpikeLab uses Vercel for hosting, Neon for database storage, and Sentry for error and performance monitoring. Browser sign-in uses session cookies. Browser diagnostics may include masked session replays; text, inputs, and media are masked in the configured replay integration.
Disconnecting and data requests
Disconnect SpikeLab in your client to stop using the integration. Revoking a refresh token stops future token renewal. An already issued access token can remain valid for up to 15 minutes; signing out of its linked SpikeLab session also stops private access.
Disconnecting does not delete your SpikeLab decks or collection. Account data remains available in SpikeLab while you use the service. To request access, correction, or deletion of your account data, contact tech@spikelab.gg. Do not send passwords or access tokens. We may ask you to verify account ownership.