Privacy policy

Only what we need to deliver your card and process your payment:

• Email address — so we can send your download link.
• Order details — which cards you bought, when, and the price.
• Payment information — handled entirely by Stripe; we never see your full card number.

We don't ask for your name, address, phone number, or any account login.

Your email is used to deliver the download link, to send a receipt, and — only if something goes wrong with your order — for us to reach out about it. We do not add you to a marketing list. We do not sell or share your email with anyone.

Two third parties, both required to fulfill the order:

• Stripe — payment processing. Their privacy policy: stripe.com/privacy.
• Our email provider — to deliver the download link. We use a reputable transactional email service.

For order fulfillment, that's it — we never sell your information and don't use data brokers. For site analytics and advertising measurement, see Analytics & advertising below.

We use one session cookie to keep your shopping cart between page loads (it expires when you close your browser). We also use the Pinterest Tag, which may set advertising cookies — see Analytics & advertising below.

• Plausible Analytics — privacy-friendly, cookieless site analytics. It doesn't track you across sites or collect personal data. Their privacy policy: plausible.io/privacy.
• Pinterest Tag — measures the performance of our Pinterest content and ads, and may set advertising cookies. We do not send Pinterest your email or other personal information. You can opt out of Pinterest's ad tracking in your Pinterest account settings or via your browser's cookie controls. Their privacy policy: policy.pinterest.com.

Order records (including your email and what you bought) are kept for 7 years for tax and accounting purposes. Built bundle ZIPs are deleted after 90 days; the signed download link expires at 14 days.

You can email [email protected] at any time to:

• Get a copy of everything we have on you.
• Correct anything that's wrong.
• Have your information deleted (subject to the 7-year tax retention above).

We aim to respond within 7 days. EU and California buyers have specific statutory rights (GDPR, CCPA) — these apply.

This site isn't directed at children under 13 and we don't knowingly collect their information.

If we change this policy, the "Last updated" date at the top changes. Big changes that affect you will also be sent to recent buyers by email.