Privacy Policy
Last updated October 29, 2026
The short version
We keep what we need to deliver your card, answer you, and understand how people use the site so we can improve it. We don't sell your data.
What we collect
What you give us: your email address (saved as you type it, so we have it even if you leave before paying), and the design, tone, finish and plan you choose.
When you pay: Stripe and Apple handle your payment details. We never see your card number. We receive the amount, a payment reference and whether it succeeded.
How you use the site: which steps you view and for how long, what you tap, whether Apple Pay is available on your device, and where you came from (the referring site and any ad or campaign tags in the link).
Your device and connection: IP address, approximate location derived from it (country, region, city), device type, operating system, browser, language, time zone and screen size.
We use your browser's local storage to remember your choices and to recognise a returning visit. We don't use advertising cookies.
Why we use it
To deliver your card and receipt, to help you if you contact us, to prevent fraud and abuse, and to measure and improve the site (for example, which step people leave on). We may email you about an order you started but didn't finish; every such email lets you opt out.
Who handles it for us
Stripe (payments), Vercel (hosting), Supabase (our database, hosted in the United States), and our email provider for sending your card and receipt. They process data only on our instructions.
How long we keep it
Order records are kept as long as we need them for accounting and the law (usually several years). Site usage data and emails from visits that didn't end in a purchase are kept for up to 24 months.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it, by writing to support@cardwrapper.com. If you are in the EU, UK or a US state with privacy laws, you have these rights by law, and you can also complain to your local data protection authority.
Children
The service is not meant for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy we'll update the date above.