Privacy Policy

Last updated Sep 27, 2026

cards.company is a product of PitWall Studios and is operated by Chaitanya Mutyala, doing business as PitWall Studios, who is responsible for your data.

We collect as little as possible and never sell your data.

What we store

  • Card details you enter: title, recipient's name, cover message and, optionally, your name and email and the recipient's email.
  • Messages and photos people add to a card, with the name they sign with.
  • Contact details you choose to share on farewell, retirement and welcome cards. Signers' details are shown only to the card's recipient. Details the recipient shares are shown to everyone with the card link.
  • An anonymous browser ID so you can edit your own message and to prevent abuse. If you choose to sign in, your email address is used to find the cards you organize. There are no passwords.
  • Payment records for upgrades. Card details are handled by Stripe and never reach our servers.

How we use it

To run the service: showing cards, sending the emails you ask for (manage links, delivery, replies), preventing abuse and handling payments. We don't send marketing emails.

We also count visits and which features are used, with PostHog, to improve the site. This uses no cookies and stores nothing on your device. Before anything is sent, card links, card IDs and keys are removed, and no messages, names or emails are included. We don't track you across other sites. If your browser sends Do Not Track or Global Privacy Control, we send nothing.

Who can see it

Anyone with a card's link can see that card. Emails are never shown on cards. We use these service providers:

  • Google Firebase: hosting, database, file storage and sign-in. Data is stored in the United States.
  • Google reCAPTCHA: protection against bots. It receives information about your browser and device when you use the app.
  • Stripe: payments.
  • Resend: sending email.
  • ImprovMX: forwarding mail sent to hello@cards.company.
  • Anthropic: Help me write.
  • GIPHY: GIF search.
  • Slack: our Slack app, if your workspace adds it.
  • PostHog: anonymous usage statistics (see above).

When you use Help me write, the occasion, the recipient's name, the card title, the tone you pick and the words you type are sent to Anthropic to suggest messages. Anthropic doesn't use them to train its models, and deletes them within 30 days, unless they're flagged for breaking Anthropic's usage policies.

When you search for a GIF, your search words go to GIPHY through our servers, without your name or email. GIFs are loaded from GIPHY, so GIPHY can see the IP address of anyone viewing a card with a GIF on it.

If your workspace adds our Slack app, we store the workspace's name and the access token Slack gives us, so the app can post cards, look up the names of the people you mention, and send a delivered card to the person it's for. When you use /card, Slack sends us the command text, your Slack user ID and the channel ID; we keep these with the card so you can post reminders. When someone posts a link to a card, Slack sends us that link so we can show a preview with the card's title and signature count. The app doesn't read your channels or messages.

If your company uses automatic birthday and anniversary cards, a team admin adds a list of people: name, optional work email, birthday (month and day only, never the year) and start date. We use it only to start those cards on time and keep each card hidden from the person it's for. Admins can edit or remove anyone at any time, and removing a person deletes their entry.

Staff access

A small number of people we authorize can view card contents, including hidden messages and contact details, and organizer and recipient email addresses. They do so only to handle support requests, abuse reports and payments, and every change they make is logged.

Cookies and storage

We don't use cookies or storage for advertising, analytics or tracking (our usage statistics work without them). Your browser stores only what the site needs to work:

  • A sign-in session (Firebase), holding the anonymous browser ID described above.
  • A list of the cards you've organized on this device, so you can find them again.
  • Google reCAPTCHA may set a cookie to tell people from bots.
  • When you pay, Stripe uses its own cookies on its checkout page to prevent fraud.

The site's fonts are hosted on cards.company itself, not loaded from Google.

Deletion

Cards are deleted automatically (12 months after delivery, 3 years for upgraded cards, or 6 months if never delivered). Organizers can delete a card at any time, and signers can delete their own message until the card is delivered. To request deletion of anything else, email hello@cards.company.