Privacy Policy

Your email address, the goals you write, the photos you upload, and basic technical logs needed to keep the service running. For no-account event participants we store a browser token and the first name they typed, nothing else unless they choose to add a phone number or email for recovery.

We do not buy data about you, we do not run third-party advertising trackers, and we do not build a profile of you for anyone else. Analytics is not in the first release at all.

Photos are stored so your card can display them. They are private to your card: only you, and anyone you send your card’s link to, can see them. We do not use them for training, marketing, or anything other than showing them on your card.

Stripe handles card payments and we never see or store your card number. Our hosting and storage providers process data on our behalf under contract. That is the full list: we do not share data with advertisers or data brokers.

We use browser storage to keep you logged in, to remember the language you read the site in, and, for no-account event participants, to hold the token that returns them to their card. There are no advertising cookies.

As long as your card exists, because the card is the product. You can ask us to delete a card and its photos at any time, and deletion is real, not a flag in a database.

You can request a copy of everything we hold on you, correct it, or have it deleted. Email us and we will do it within thirty days.

This is not built for under-13s and we do not knowingly collect their data.