Privacy Policy

Last updated: August 9, 2026

This Privacy Policy explains what information Card In collects, how we use it, and the choices you have. We never ask for or store your actual card number, CVV, or online banking credentials.

1. Information We Collect

Account information: username, email address, first/last name, and password (stored securely hashed — we never see or store it in plain text). If you sign in with Google, we receive your name and email from Google instead.

Profile information: a profile picture, if you choose to upload one.

Usage information: cards and offers you save as favorites, and comments you post.

Technical information: a session token (JWT) stored in your browser to keep you signed in. We don't use third-party advertising trackers.

2. How We Use Your Information

To create and secure your account, and let you sign in
To save your favorite cards/offers and show your comments
To send account-related emails (activation, password reset)
To keep the Service secure and prevent abuse

We do not sell your personal information to third parties.

3. Third-Party Services

We rely on a small number of third-party services to run Card In:

Google Sign-In — if you choose to sign in with Google, Google shares your name and email with us to create your account.
Email delivery — we use a transactional email provider to send activation and password-reset emails.

4. Data Storage & Security

Your data is stored in our database and is not publicly accessible. Passwords are hashed, not stored in plain text. Comments and your display name are visible to other users of the Service; your email and saved favorites are private to your account.

5. Your Rights & Choices

You're in control of your data at any time from your account:

Update your name, profile picture, or password from Settings
Remove any card or offer from your saved favorites
Delete any comment you've posted
Permanently delete your account and associated data from Settings

6. Cookies & Local Storage

We use your browser's local storage to keep you signed in between visits. We don't use advertising or cross-site tracking cookies.

7. Children's Privacy

Card In is not directed at children under 13, and we do not knowingly collect their data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do.

9. Contact Us

Questions about this policy, or want to exercise a data right not covered above? Reach us at cardin.noreply@gmail.com.