Privacy policy

Last updated: September 28, 2026.

The short version

• We don't have accounts and we don't store your cards.
• A card — names, message, style and an optional tiny photo — is compressed into the link, after the # sign. Browsers never send that part of a link to a web server, so it doesn't reach ours.
• Anyone who has the link can open the card. Share it only with the people you mean it for.

What stays on your device

While you write, the composer keeps a draft (without the photo) in your browser's local storage so you don't lose it if the page reloads. Photos are resized in your browser; the original file never leaves your device. Videos and images you download are created in your browser too.

Server logs

Our web server, hosted in the European Union, keeps standard access logs (IP address, time, requested page without the # part, browser type) for security and troubleshooting, for up to 14 days.

Analytics and advertising

If enabled, we use Google Analytics 4 with IP anonymisation to count visits to our pages, and Google AdSense to show clearly labelled ads on information pages — never inside a card. These services may set cookies; where required, you will be asked for consent first. You can opt out of personalised Google ads at adssettings.google.com.

Children

CardPetal is a general-audience site and doesn't knowingly collect personal information from children.

Your rights and contact

Because we don't store cards or accounts, there is usually nothing of yours for us to access or delete. For any privacy question, write to info@novpix.com — Novpix LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States.