Privacy Policy
1. The short version
- The words and names you put in a card, plus the number of a built-in illustration you pick, are packed into the card link itself, after the
#sign. Web browsers do not send that part of a link to our servers, so we do not receive, store or see your cards. - This edition does not support uploading photos. Cards only use illustrations that ship with the site. Nothing you type is uploaded to us.
- We have no accounts, no database of cards and no advertising trackers.
2. What this means for you
- Anyone who has the link can open the card and see everything in it (the names, the message and which built-in illustration you chose). Only share the link with people you trust, and do not put sensitive information (passwords, ID numbers, addresses) in a card.
- We cannot recall, edit or delete a link after you send it, because we never had a copy. If the recipient forwards it, the new person can open it too.
- Messaging apps may store the link (and so the card content) under their own privacy policies.
3. Information our servers may process
Like any website, our hosting provider (Cloudflare Pages) receives basic technical data when you load a page: IP address, browser type, the page address without the part after #, and the time of the request. This is used to deliver and protect the site.
4. Site analytics (no cookies)
When the live site is configured for it, we use Cloudflare Web Analytics to count page views (including how often the card page, the “Make one too” bridge page, and the premium “Coming soon” page are opened). It does not use cookies, and Cloudflare states it does not track individual end users across sites.
- We may see: which of our pages were loaded, basic performance timings, a coarse referrer (our pages send
Referrer-Policy: no-referrer, so other sites usually get no referrer from us), browser/device class as Cloudflare reports it. - We do not collect through analytics: the text of your card, names, which built-in illustration you picked, or anything after the
#in a card link. Card content stays in the link on your device. (Our own tests check that the analytics beacon request does not include the#fragment; see the launch notes.) - Analytics can be turned off. The JS beacon, when enabled, loads from Cloudflare’s domain
static.cloudflareinsights.comand reports tocloudflareinsights.com(or, with Cloudflare’s automatic injection, to our own/cdn-cgi/rum).
5. Payments (not available yet)
Premium templates and watermark removal are shown as "coming soon". No payment is taken today. If payments are added, they will be handled by a third-party payment provider, and this policy will be updated before that happens.
6. Reports
If you report a card, you send us the link and your message by email. We use it only to review the report and, if needed, block the card from being shown on our site.
7. Children
The service is not directed at children under 13.
8. Your rights
Because we do not store card content, there is usually no personal data about you to access or delete. For anything we do hold (such as a report email), contact us below.