Privacy

If you join a waitlist, we store your email address and which form you used (a “source” label) so we can email you about access and pricing. Unsubscribe any time by replying.

If you sign in, we use passwordless magic-link authentication (provided by Supabase). We store your email to create your account and send you one-time sign-in links — there are no passwords to manage.

When you buy Pro, we store your account ID, the fact that you’re a Pro user, the order ID from our payment provider, and the dates the purchase was granted or refunded. We use this only to unlock paid features for your account and to handle refunds. We never see or store your card details (see Payments).

The text, colours, and options you enter in the editor are sent to our server only to render your card image, then discarded as soon as the image is generated. We do not store the content of your cards, your inputs, or any render history.

We use your IP address temporarily to rate-limit requests and prevent abuse of the editor and export API. It is used only for counting, is automatically deleted shortly after (within about a day), is never written to our logs, and is not used to identify you.

We use only strictly-necessary cookies: a secure session cookie is set when you sign in, so you stay logged in. We do not use tracking, advertising, or analytics cookies — so there is no cookie banner to click through.

We use Plausible, a privacy-friendly analytics tool that uses no cookies and collects no personal data. We see aggregate page views and which buttons get clicked — not who you are.

If you buy the lifetime deal, checkout is handled by LemonSqueezy, who act as the Merchant of Record. They process your payment on their own systems — we never see or store your card details.

We don’t sell your data. We rely on a small set of trusted providers to run the service:

• Supabase — database and magic-link sign-in (stores your email and account).
• LemonSqueezy — payment processing as Merchant of Record.
• Plausible — cookieless, aggregate analytics.
• Our hosting provider — serving the app and rendering your card images.

• Waitlist emails that never become an account: deleted within 12 months.
• Account & Pro data: kept while your account exists, and deleted when you ask.
• Order references: minimal records kept for accounting and fraud prevention, even after a refund.
• Rate-limiting / IP data: automatically deleted within about a day.

Email us at support@ogcard.app to access or delete your data. We’ll remove your waitlist email and/or your account and Pro data. For legal and accounting reasons we keep minimal references to refunded orders, but these don’t identify what you made.

Questions about anything here? Email support@ogcard.app and we’ll happily explain.