I believe this depends on the location of hosting. One version is that things are hosted by URI on wizards.com. Another is the data being stored on something content-addressable like IPFS where anyone with the content can verifiably attest to both ownership (b/c it's on the block chain) and that this is the real thing (b/c the content hashes match).