Privacy Policy
Last updated: February 12, 2026
1. Introduction
Welcome to CardShilp ("we", "our", "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our website at cardshilp.com.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you sign up, we collect your name, email address, and password (securely hashed). This data is managed by Supabase, our authentication provider.
- Card Designs: Your card designs, including canvas elements, text content, uploaded images, and design settings are stored so you can save, edit, and access your work across sessions.
- Reviews & Feedback: If you submit a review or feedback through our in-app prompt, we store your star rating and optional text feedback linked to your account.
- Contact Form: When you submit a message through our contact form, we collect your name, email address, and message content. This data is processed by Formspree.
- Payment Information: When you upgrade to Pro, payment is processed securely by Razorpay. We store your transaction ID, order ID, and payment status. We do NOT store your card number, CVV, UPI PIN, or any sensitive payment details — these are handled entirely by Razorpay.
2.2 Automatically Collected Information
- Analytics: We use Google Analytics to collect anonymous usage data such as page views, session duration, browser type, and device type. No personally identifiable information is sent to Google Analytics.
- Local Storage: We store theme preferences, tour completion status, and review submission status in your browser's local storage.
2.3 Information We Do NOT Collect
- We do not collect or store sensitive payment details (card numbers, CVV, UPI PIN). All payment processing is handled by Razorpay.
- We do not sell, rent, or share your personal information with third parties for marketing.
3. How We Use Your Information
- To provide, maintain, and improve the CardShilp service
- To authenticate your identity and secure your account
- To save and sync your card designs across devices
- To send password reset emails when requested
- To analyze usage patterns and improve user experience
- To respond to your inquiries and feedback
- To process Pro upgrade payments and manage your subscription status
4. Data Storage & Security
Your data is protected using industry-standard encryption. Authentication and database hosting is handled by Supabase with enterprise-grade security including encryption at rest and in transit, row-level security policies, and regular backups. Our site is served over HTTPS.
5. Third-Party Services
CardShilp integrates with third-party services including:
- Supabase — authentication and database hosting
- Google Analytics — anonymized usage analytics
- Google Fonts — web font delivery
- Formspree — contact form processing
- Razorpay — secure payment processing for Pro upgrades
Each of these services has their own privacy policies. We encourage you to review them.
6. Cookies & Local Storage
We use browser localStorage to store theme preferences, tour completion, and review status. Supabase may set cookies for session management. Google Analytics uses cookies for anonymous analytics — you can opt out using the Google Analytics Opt-out Browser Add-on.
7. Children's Privacy
CardShilp is not intended for children under 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.
8. Your Rights
- Access and update your personal data via the Profile page
- Export your card designs as PNG, JPG, or PDF at any time
- View your payment history and Pro status in your account
- Request deletion of your account and all associated data
- Clear all locally stored data through your browser settings
- Opt out of Google Analytics tracking
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy, please reach out through our contact form.