Privacy Policy for CardMaker

This page explains how we collect, use, and protect your information when using CardMaker at cardmaker.org.

Effective Date: March 25, 2026

Introduction

CardMaker is an AI-powered card image generator that lets you create custom card designs — from trading cards and Pokemon cards to birthday cards, greeting cards, and more — using text prompts and image uploads.

Your privacy matters to us. This policy explains what we collect, how we use it, and how we protect your information, as well as your choices and rights.

We do not collect passwords or payment info, and we never sell your data.

1. What We Collect

  • Account information: Your email address and basic profile details (name, avatar) when you sign up or log in via a third-party provider (e.g., Google OAuth).
  • User-generated content: Prompts, uploaded images, and generated card designs you create through our service.
  • Usage data: Basic analytics such as pages visited, feature usage, device type, browser, and session duration to help us improve service quality and performance.
  • Cookies and local storage: Session tokens, preference settings, and anonymous analytics identifiers.

We do not collect passwords, payment card numbers, or sensitive personal data directly. Payments are handled securely by our third-party payment processors (Stripe, Creem).

2. How We Use Your Information

  • Provide our service: Generate and deliver your AI-created card images based on your prompts and uploads.
  • Improve the service: Analyze aggregated usage patterns to optimize performance, fix issues, and develop new features.
  • Support: Respond to your questions, feedback, and support requests.
  • Communication: Send transactional emails (order confirmations, credit notifications). We do not send marketing emails without your consent.

We never sell your data or share it with advertisers.

3. Cookies

We use cookies and similar technologies to:

  • Maintain your login session and remember your preferences
  • Collect anonymous analytics data to understand how users interact with our site
  • Enhance your overall experience

You can disable cookies in your browser settings at any time. Some features may not work correctly without them. We do not use cookies for advertising or cross-site tracking.

4. Third-Party Services

We integrate with trusted third-party services that may process limited data on our behalf:

  • Analytics: Google Analytics (anonymous usage data such as device type, country, session duration)
  • Authentication: Google OAuth, GitHub OAuth (email and profile for login)
  • Payment processing: Stripe, Creem (payment information is handled entirely by these providers)
  • Infrastructure: Cloudflare (CDN, security), Vercel (hosting)

These services have their own privacy policies. We recommend reviewing them if you have specific concerns. Please avoid uploading sensitive, confidential, or personally identifiable content in your prompts or images.

5. Data Retention

  • Account data: Retained as long as your account is active. Deleted upon account deletion request.
  • Generated images: Stored for your access and may be retained for service improvement. You may request deletion at any time.
  • Usage analytics: Aggregated and anonymized data may be retained indefinitely for service improvement.

6. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Deletion: Request deletion of your account and associated data.
  • Correction: Request correction of inaccurate personal data.
  • Opt out: Unsubscribe from non-essential emails at any time.
  • Data portability: Request your data in a machine-readable format.

To exercise any of these rights, contact us at support@cardmaker.org.

7. Children's Privacy

CardMaker is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

8. International Users

CardMaker is operated from the United States. If you access our service from the European Union, United Kingdom, or other regions with data protection laws, please be aware that your information may be transferred to and processed in the United States. By using CardMaker, you consent to this transfer.

9. Changes to This Policy

We may update this policy from time to time. When we do, the Effective Date at the top will be updated. We encourage you to review this page periodically. Continued use of CardMaker after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or your data: