Privacy Policy

Your photos and your message are processed in your own browser and are never uploaded to a pullcard.app database. All order content and personal details we do hold — your card artwork, recipient name, message and delivery email — are destroyed within 10 days of the card being generated. The only things kept longer are the payment record held by our payment provider and de-identified system logs, both of which we are required to retain.

Photos and message. Selected in your browser, rendered into the card preview on your device, and included in the PDF we email you. They are not saved to any pullcard.app storage bucket or database.

Recipient name. Used to title the card and name the PDF file, and attached to the order for the 10-day support window.

Email address. Entered twice at checkout so we deliver to the right inbox. Used only to send your card and any order correspondence — no marketing, ever, and never sold or shared.

Payment details. Entered directly on Stripe's hosted checkout. We receive only a payment reference, the amount, and the email you supplied. We never receive or store your card number.

Technical logs. Standard request and delivery logs (timestamps, order reference, export serial number, success or error). These carry no photo or message content.

Every generated card is numbered and dated. Ten days after generation, the artwork and the order's personal details — recipient name, message text and delivery email — are deleted, and any download link stops working. This is why the delivery email tells you to save the PDF straight away.

To be exact about what survives that deletion, and why: the transaction record held by Stripe (amount, date, payment reference and the email you paid with) is retained under Australian tax and financial-records law, which requires business records to be kept for five years, and under payment-network and anti-fraud obligations. De-identified system logs are kept for security and accounting. A copy of your PDF also remains in your own mailbox for as long as you keep the email — that copy is yours, and outside our control.

Stripe processes payments and holds the transaction record. Our email delivery provider transmits the card email and attachment. Our hosting provider serves the site. Each acts only to run the service; none receives your data for their own marketing.

We don't run advertising or cross-site tracking cookies. The site uses your browser's local storage to hold your in-progress card draft and export numbering on your own device, and Stripe sets its own cookies on its checkout pages to prevent fraud. Clearing your browser storage discards the draft.

pullcard.app is intended for adults buying cards. We don't knowingly collect information from children under 13.

You can ask us to delete your order data before the 10 days elapse, or ask for a copy of what we hold — reply to your delivery email with your order reference. Because we hold so little for so short a time, most requests are satisfied simply by the automatic deletion. See also the Terms of Service.