How we handle your data

This policy explains what information we collect, how we use it, and the choices you have when using Greeting Card Fun.

Effective date: October 12, 2026

Information We Collect

Account details such as your name, email address, profile image, and sign-in provider (Google, X, or email magic link) when you create or use an account.
Card creation data such as selected templates, uploaded photos, text you enter, generated card images, and settings needed to save work in progress.
If you schedule a card email, we store the recipient email address, sender display name, chosen delivery time and time zone, and delivery status. We share the email content, recipient address, and scheduled time with Resend to deliver the card. Recipient addresses are not added to a marketing list or shown on public cards.
Messages you send through the contact form (name, email, and message).
Payment and purchase records for credit-pack checkouts and billing events. We do not store full payment card numbers on our servers; Stripe processes payments.
Technical and usage data such as device/browser details, IP address, and interaction logs needed for security, fraud prevention, and service reliability. If Google Analytics is enabled, we also collect standard analytics events and cookies.

Provide core features, including account access, card generation, saving progress, downloads, and sharing.
Send a scheduled card email at the creator’s request, let the creator manage delivery, and investigate delivery failures or unwanted emails. Only schedule cards for people you know and have permission to email.
Process credit usage, purchases, refunds, and account-related communications.
Protect the app and users by detecting abuse, enforcing limits, and preventing unauthorized access.
Improve product quality through analytics and troubleshooting of bugs, errors, and performance issues.

When you generate a card, your uploaded photo, selected template, and generation instructions are sent to Google (Gemini) to create the merged image.
We use this data to provide generation, store the result, and operate, monitor, and improve the quality and safety of the feature.
Do not upload sensitive personal information, confidential documents, or images you do not have permission to use.

New cards and clones start as link only and stay out of the public gallery. Anyone with the share link can view them without signing in, including people the link is forwarded to.
Choose Show in public gallery to let people browsing the site discover your card. Only publish photos you have permission to share publicly. You can remove your card from the gallery in your Dashboard; its existing share link will still work. Cards saved before this change keep their existing gallery setting.
Card images and uploaded photos are stored as files with public URLs (unlisted, not a directory listing). Treat share links and image URLs as something you control who you send them to.
You are responsible for the text and images you upload or share through the service.

We use cookies and similar technologies to keep you signed in, remember theme/preferences, and support essential site functionality. Sign-in uses Google, X, and/or email magic links (via our auth and email providers).
Your browser may store draft card progress, and photos in local storage or IndexedDB, so you can resume after login or a refresh.
You can control cookies in your browser settings, but some features (especially sign-in) may not function correctly if disabled.

With service providers that help us run the app, including hosting and file storage (Vercel), database hosting, authentication (Google and X), AI image generation (Google Gemini), email delivery, analytics (Google Analytics, when enabled), and payments (Stripe).
When required by law, regulation, subpoena, or other legal process, or to protect rights, safety, and security.
In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
We do not sell your personal information for money.

We retain account, card, and purchase records for as long as needed to provide the service, maintain records, resolve disputes, enforce agreements, and meet legal obligations.
Source photos you upload are kept for a limited time (about 30 days) and then deleted from storage. Generated card images are kept while the card remains in your account.
The current email delivery record is kept with its card until the card is deleted or the canceled or failed delivery is replaced. Cancel outstanding emails before deleting a card. Our email provider may retain delivery records under its own retention policies.
You may request account deletion by emailing codemintstudios@gmail.com or using the contact form. Legal, security, fraud-prevention, and accounting rules may require limited retention of some records.

You can review your name, email, credits, and purchase history on the account page. There is no in-app editor for every field; contact us to correct or delete data.
You may request access, correction, or deletion of your personal data by contacting us.
Depending on your location, you may have additional legal rights regarding your data.

We use reasonable technical and organizational safeguards designed to protect personal information.
No internet service can be guaranteed 100% secure, and you use the service at your own risk.

The service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
If you believe a child has provided personal information, contact us so we can review and remove it as appropriate.

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date below and provide notice where appropriate.

If you have privacy questions or requests, contact us at codemintstudios@gmail.com or through the contact form.