Privacy

Last updated 29 August 2026

What we collect

Senders: your email address (to sign you in), your messages and optional images, and which card each belongs to. Readers: nothing that identifies you. We record that a card was scanned, a hashed form of the IP address, and the browser family; the hash is deleted after 30 days.

What we do with it

We use it to run the service: sign you in, show messages when their timer ends, moderate content, and stop abuse. We send email only for sign-in links and moderation notices. We never sell your data and we do not show ads.

Images

Uploaded images are re-encoded and stripped of metadata (including location) before anyone can see them. The original is deleted.

How long we keep things

Unscanned messages are deleted 90 days after you write them. Read messages are deleted after 365 days on the free plan. Deleting a message removes its text and image right away. Sign-in links expire in 15 minutes.

Who else sees it

Our hosting and email providers process data on our behalf, and an automated moderation service reviews message text and images. We share data with authorities only when the law requires it.

Your choices

Delete any message from your cards page. To close your account or ask what we hold about you, reply to any email we have sent you.