Privacy Policy

1. Information We Collect

Organisers: When you create an account, we collect your email address for authentication purposes.

Signers: When you sign a card, we collect your message and optionally your name. We do not require signers to create accounts. Please be aware that your message and name will be visible to anyone who has the card's view link — treat them as you would a physical card that others may read.

Analytics: We use Google Analytics to understand how our service is used. This includes anonymised data about page views, device types, general location, and feature usage such as downloading a card as a PDF.

PDF downloads: When you download a card as a PDF, the file is generated entirely within your browser from data you can already see. We do not create or store a copy of the downloaded file. To prevent abuse, we keep a small record of recent downloads.

2. How We Use Your Information

• To provide and maintain the SimpleCards service
• To send authentication emails (magic links) to organisers
• To send report notifications to organisers
• To improve our service based on usage patterns

3. Message Visibility

Messages and signer names you submit are publicly visible to anyone who holds the card's view link. SimpleCards does not restrict who may access a card once they have that link. Do not include sensitive, confidential, or personal information in your message that you would not want others to see.

The card organiser (the person who created the card) can remove any message at any time. If you would like your message removed, contact the organiser or email us at privacy@simplecards.online.

4. Data Retention

Signing links expire 30 days after card creation, after which no new messages can be added to the card. The card and its view link remain accessible for up to 6 months from the date of creation.

6-month automatic deletion: At the 6-month mark, the card and all associated data are permanently and automatically deleted from our systems. This includes the card itself, all messages and signer names, any reports filed against messages, and any uploaded cover images. Deletion is irreversible — we do not retain backups of individual cards after this point.

Your organiser account (email address) is stored separately and is not deleted when a card expires. You can delete your account at any time by contacting us at privacy@simplecards.online.

5. Data Sharing

We do not sell your data. We only share data with service providers necessary to operate SimpleCards (hosting, email delivery, analytics).

6. Your Rights

Under GDPR and similar regulations, you have the right to access, correct, or delete your personal data. Contact us at privacy@simplecards.online to exercise these rights.