Privacy Policy

Effective date: March 15, 2026 · Last updated: June 17, 2026

This Privacy Policy explains how MyCardBatch ("we", "us") collects, uses, and protects your information when you use our Service at mycardbatch.com.

1. Information We Collect

Account information: When you register, we collect your name, email address, and a hashed (not plain-text) version of your password. This data is stored in your browser's local storage on your device.

Card images: Images you upload for scanning are transmitted to our Cloudflare Worker and stored in Cloudflare R2 object storage. They are retained while the associated card is active in your account, and images for sold cards are automatically deleted approximately 90 days after the sale.

Usage data: We store batch export history and token transaction history locally in your browser (IndexedDB / localStorage). Login timestamps are also stored locally for admin reporting purposes.

Payment information: When you purchase credits, payment is processed by a third-party payment provider (Stripe). We do not receive or store your card number, expiry, or CVV.

Feedback: If you submit feedback through the help widget, your message and email address are forwarded to us via email.

2. How We Use Your Information

To provide and operate the Service (AI card scanning, CSV generation, credit management).
To send transactional emails: account verification, password resets, and purchase receipts.
To send service announcements when necessary (e.g. downtime, major changes).
To respond to support requests submitted through the feedback widget.

3. Data Storage and Security

Account data (name, email, hashed password, credits) is stored in your browser's local storage and IndexedDB. Batch history and listing data is synced to Cloudflare D1 (our cloud database) so it is accessible across devices. Data does not leave your device or our servers except as described in this policy.
Card images are stored on Cloudflare R2 servers in the United States and are automatically deleted approximately 90 days after the associated card is sold.
Passwords are hashed using SHA-256 before being stored. We cannot recover plain-text passwords.
All connections to our servers are encrypted via HTTPS/TLS.

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Cloudflare — infrastructure, image storage, serverless functions, and cookieless web analytics.
Resend — transactional email delivery.
Anthropic (Claude API) — AI image analysis for card scanning.
Stripe — payment processing (when real payments are enabled).

5. Email Communications

We send the following emails:

Verification email — sent once on signup to verify your address.
Password reset — sent only when you request it.
Purchase receipts — sent after a credit purchase.
Service announcements — sent occasionally for important service updates. You may opt out by contacting us.

We do not sell your email address or send marketing email to you without consent.

6. Data Retention and Deletion

Card images are deleted automatically approximately 90 days after the associated card is sold.
Account data stored in your browser persists until you clear your browser data or contact us to request deletion.
To request deletion of your account and any associated data we hold, email [email protected].

7. Cookies and Analytics

We do not use advertising cookies or cross-site tracking. Session state is managed via browser localStorage and IndexedDB, not cookies.

We use Cloudflare Web Analytics to measure aggregate site traffic (such as page views, referrers, and country). It is privacy-focused, does not use cookies, does not fingerprint visitors, and does not collect any personally identifiable information.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. Continued use of the Service after changes constitutes acceptance.

10. Contact

Questions or requests? Email us at [email protected].

← Back to MyCardBatch