Privacy Policy
Effective November 5, 2026.
cardtap is operated by KJ Bucketlist Inv, LLC in Austin, Texas. This policy explains what we collect when you make a cardtap page, visit one, or share your info through one. The short version: we never sell your information, and cardtap never texts the people who share their info on a page.
If you have a cardtap page
- What you give us: your name, title, page name, photo, links, the email and phone you choose to show, and your account email.
- Payments: handled by Stripe. We see your subscription status and the last details Stripe shares with merchants. We never see or store your full card number.
- Referral payouts: if you set up payouts, Stripe collects your identity, bank and tax details on its own pages. We store only the Stripe account id and your referral history.
- Email: we send receipts, edit links, new-contact alerts and referral updates from [email protected].
If you share your info on someone's page
The "Share your info" form sends your name, email, mobile and company to the person whose page it is. We store it so they can see it, along with the consent text you saw and your browser type, and we email it to them. They can use it to follow up with you. cardtap itself never texts you, never adds you to a mailing list, and never sells your information. To have your details deleted from our records, email us (below). The page owner may already have saved them; ask them directly too.
If you visit a cardtap page
- Analytics: we use Google Analytics to count visits to the homepage and to each page, and whether someone saved a contact or shared their info. Google receives the page path and standard device and browser information. We send the path only, never private links or tokens. Google's use of this data is covered by Google's policy. You can opt out with Google's opt-out add-on or your browser's tracking protection.
- How you found us: if you arrive from a link with campaign tags (for example from one of our ads) or from another website, we remember the tag and the referring site's name for 60 days in local storage and save them with your page when you sign up, so we can tell which marketing works. We don't use advertising pixels or share this with advertisers.
- Referral cookie: if you arrive through someone's "Get yours" link, we remember their page name for 60 days (a first-party cookie and local storage), so they get credit if you sign up.
Who we share it with
Only the service providers that run cardtap: Stripe (payments and payouts), Cloudflare (hosting and email sending), Supabase (database), and Google (analytics). We also disclose information when the law requires it or to protect cardtap and its users from fraud or abuse. That's it. No data brokers, no advertisers.
How long we keep it
Page data stays while your page exists and for a reasonable period after it ends, in case you come back or for our records. Payment and payout records are kept as long as tax and accounting rules require. You can ask us to delete your page and personal data at any time.
Abuse
If we decide someone has used a cardtap page, its referral link or the contacts it collects to spam people, or to do anything else that puts cardtap or its users at risk, we can shut that page down immediately and without a refund, as our Terms of Service describe. If you think a page is being misused, tell us.
Security
Connections are encrypted (HTTPS). Editing a page needs a one-time link sent to the owner's email; there are no passwords to steal. No system is perfectly secure, but we limit what we collect to what cardtap actually needs.
Children
cardtap isn't meant for anyone under 18, and we don't knowingly collect information from children.
Changes
If we change this policy in a meaningful way, we'll update the date above and email page owners.
Contact
Privacy questions or deletion requests: [email protected].