Privacy information

MUTher uses your email address and a password hash to manage your account. The browser sends a session cookie to the MUTher API when you sign in and request your account data.

If you link EA, the backend stores encrypted EA session credentials and persona details so it can request your binder. Saved binder snapshots include the inventory information returned by EA. The database and application run on infrastructure hosted by DigitalOcean.

The Chrome extension opens EA’s sign-in page and finishes a link you started. It cannot read your MUTher account: when you select Link EA account in Settings, this website issues a one-time pairing code from your own signed-in session and passes only that code to the extension, which also accepts the same code pasted by hand. The extension then observes the authorization redirect for that linking attempt and sends its one-time authorization code to the MUTher API over HTTPS. Your email address is never sent to the extension.

The extension does not read your EA password, store EA access or refresh tokens, or collect general browsing history. It keeps temporary linking state in Chrome session storage, including the pairing capability, authorization URL, random redirect state, tab identifier, and timing information. After linking, it receives and temporarily stores your EA persona display name to show which account was connected. Chrome clears this session storage when the browser session ends. EA handles the password you enter on its own website.

It requests two permissions and no access to any website: temporary extension storage, and detecting the browser’s navigation to the registered loopback callback (http://127.0.0.1/success) when your sign-in finishes. It holds no permission on any EA site, on this one, or on the MUTher API.

The AI coach is what MUTher is for, so it is on for every account and runs after every successful sync — and it works by sending your team information to a third-party AI provider. That is worth saying plainly: your content leaves MUTher’s servers to be turned into advice.

The provider is OpenRouter, which routes the request to Meta’s meta/muse-spark-1.3-contributor model. That is a contributor route: on it, the prompt MUTher sends and the answer that comes back may be used to improve that provider’s models. We use it because it is what makes a coach this thorough affordable to give away, and you can switch it off.

What is sent

• Your binder: EA card ids, player names, ratings and attributes, positions, team ids, and whether a card is auctionable or bound. The EA card-instance ids of cards you have protected go with them, so the coach knows to leave those alone.
• Your depth chart and lineup, its chemistry, and the abilities on it.
• Your wallet balances: coins, points and training.
• A digest of what changed since your last sync.
• Your coach preferences: theme team, playstyle, budget and reserve.
• Market observations for the cards in question, and the wiki evidence the coach is answering from.
• In coach chat: the questions you type, and the earlier turns of that conversation.

What is never sent

• Your email address.
• Your MUTher user id, or any session or login identifier.
• Your EA persona or nucleus identifiers.
• EA credentials or tokens of any kind, and the raw account archive.

MUTher records what each request cost against your account in its own ledger, on its own servers — that record never travels to the provider.

You can turn the coach off at any time under AI coach in Settings. Turning it off stops new analyses immediately and keeps binder sync and browsing working, but it cannot recall information already sent to OpenRouter or Meta. Saved reports remain private account data until you explicitly delete them.

Disconnect EA in Settings to remove EA credentials, cancel active work, and remove unused pairing records. Saved account responses, snapshots, and reports remain private until you explicitly choose Delete saved EA data in Settings. That action removes the saved account data and connection but retains your MUTher login. Saved account data has no automatic expiry in this release. The deletion controls remove it from the application database; a backup-erasure timeline has not yet been verified, so this page does not promise immediate deletion from backups.

Removing the extension stops it running in Chrome. Removing it alone does not delete the connection stored by the MUTher backend.