Privacy Policy

1. Who we are

Cardly ("we", "us") is a service that lets you create, customize, and share a personal digital profile card. For questions about this policy or your data, contact us at cardly23@gmail.com.

2. What data we collect

• Account data: your email address, first and last name, and a password (stored only as an irreversible hash). If you sign in with Google, we receive your email, name, and profile picture from Google.
• Card content: everything you choose to put on your card — name, bio, photo, phone number, and social links. This is the public content of your card.
• Card analytics (visitors of your card): when somebody opens your card we store the fact that it was opened, and which link on it they tapped. Alongside that we keep only an anonymous random id (a cookie named cl_vid), the rough device type (mobile or desktop), and the website they came from. We do not store IP addresses, do not fingerprint the device, and never store the visitor's name, email or phone. The random id cannot be linked to a person: clearing your cookies makes you a brand new anonymous visitor.

3. What we do NOT do

• We never sell your personal data to anyone.
• We never send marketing emails (we only send account/security emails if ever needed).
• We never tell you who visited your card. Analytics are counts and anonymous ids — we could not tell you a visitor's identity even if you asked, because we never collect it.
• We never run ads, and we never share card analytics with anyone.

4. Where your data lives

Card data is stored on secured servers (application hosting and database). Uploaded photos are stored as files alongside the app. Data may be processed by our infrastructure providers purely to host the service.

5. Your rights

You can access, correct, or delete your data at any time:

• Edit your card and account details directly in the app.
• Delete a card from your dashboard (this removes its public page).
• Ask us for full account deletion — email cardly23@gmail.com and we will remove your account, cards, photos, and analytics within 30 days.

6. Cookies

We use a strictly-necessary login session cookie, and one first-party cookie named cl_vid that holds a random anonymous id so repeated visits to a card are counted as one visitor. Nothing else. No advertising cookies, no third-party or tracking cookies, no cross-site profiling.

7. Changes

If we change this policy, the new version appears on this page with a new date. Significant changes will be announced in the app.