Privacy policy

Information we use

• Account details: name, email address, one-way password hash, saved contact names and email addresses, and the sign-in provider and account identifier when you use Google or Facebook sign-in.
• Card details: recipient and sender names, your message, selected design, and any image you upload. If you send a thank-you reply, we also store its envelope text, note message, name, and selected text styles.
• Delivery details: recipient email address, optional reply-to address, and any requested send date.
• Order details: selected card, price, order status, and payment-provider reference. If checkout is enabled, Stripe processes payment details; Email a Card does not receive or store the full card number or security code.
• Technical details: basic request and error information handled by the web host so the site can operate and be supported.
• Optional app notifications: when you enable companion-app notifications, a device delivery token, device platform, notification preferences, and delivery/retry records linked to your account and orders.

How we use it

We use these details to manage your account and saved contacts, associate signed-in purchases with your order history, save your design, display and deliver the card, process payment when checkout is enabled, prevent misuse, and respond to support or privacy requests. A draft is kept in your browser session while you create your card.

When information is shared

We do not sell personal information or share it with unrelated companies for their own marketing. We share only what is needed with service providers that operate the service:

• Stripe processes checkout and reports payment status when payment is enabled.
• Resend sends the eCard email when delivery is enabled.
• Firebase Cloud Messaging and Apple Push Notification service deliver optional companion-app notifications. Notifications contain a generic card update and an order reference, not your card message, recipient email, or private card link.
• Google and Meta authenticate sign-ins when you choose Google or Facebook Login. Those providers process information under their own privacy policies.
• Hosting and tunnel providers transmit requests and files when the site is hosted or temporarily shared for testing.

The site also loads fonts from Google Fonts and some gallery photography from Unsplash. Those providers may receive standard connection information when your browser requests those assets.

Card links and uploaded images

A card link is a private, hard-to-guess link rather than an account-protected page. Anyone you share that link with can view the card, and the link can be forwarded. For an emailed card with a return address, someone holding the link can send one free thank-you note to the original sender. The return address is selected by the server and is not displayed to the recipient. Thank-you note links are also private links that can be forwarded. Please do not include highly sensitive information or images you do not have permission to use.

Uploaded cover images are used on the card page, not included in the email. They are stored with the card so the recipient can see the design.

Storage and retention

Account profiles, saved contacts, cards, images, and order records are stored in the service database. You can delete your account and its associated records using the instructions below. Public card links stop working after 30 days; link expiry does not necessarily mean every related record has been erased.

Cards delivered to a verified account email are available in Received cards while that account exists. Copies already received by another verified account remain available to that recipient when a sender deletes their account. PDF downloads are generated in your browser, without uploading card content to a conversion service.

Thank-you note links expire 30 days after sending. Notes and their delivery details are removed by the service's retention cleanup, normally after 30 days, or when the original sending account and its associated cards are deleted.

The companion app keeps its sign-in session in device-protected storage. Notification registrations and delivery records remain while the registration and related order exist. Turning notifications off or signing out in the app removes that device's registration and notification records; deleting your account removes all its device registrations and notification records.

Cookies and analytics

The card builder uses browser session storage to keep your draft while you move between steps. Signing in uses a signed, HTTP-only session cookie. The current version does not use advertising cookies or analytics tracking.

Your choices

You can choose what to include in a card and whether to provide an optional reply-to address or send date. Depending on where you live, you may also have rights to request access to, correction of, or deletion of your personal information.

App notifications are optional. You can independently choose received-card and scheduled-send alerts in the app, disable them there, or revoke permission in your device settings. Email card delivery does not depend on app notifications.

Delete your account and data

To delete your Email a Card account and its associated profile, contacts, cards, and order records, sign in to your account, choose Delete account, and type DELETE to confirm. Any active subscription is canceled as part of the request. Information held by third-party providers is subject to their own retention policies.

If you cannot sign in, email privacy@emailacard.com for help with a deletion request.

Contact

For privacy questions or requests, contact privacy@emailacard.com.