Cardly collects the following information:

• Email addresses used for login via Supabase Auth, Discord, or GitHub
• Feedback submitted by users
• Basic profile information provided by third-party authentication services (such as username or avatar)

Your information is used to:

• Authenticate and manage your account
• Allow admins to review and manage feedback
• Improve Cardly and its features

Cardly relies on trusted third-party services to operate:

• Supabase for authentication and data storage
• OAuth providers such as Discord and GitHub for login
• Hosting and infrastructure providers to deliver the service

These services may process limited personal data as required to provide their functionality.

Cardly uses cookies or local/session storage to maintain login sessions and ensure the app functions correctly. These are strictly necessary for authentication and are not used for advertising or tracking purposes.

We retain personal data only for as long as necessary to provide the service. Account data is kept until the account is deleted. Feedback submissions may be retained for administrative and improvement purposes.

We do not sell or rent your personal information. Data is only shared with third-party services necessary to operate Cardly or where required by law.

Your data is stored securely using Supabase services with industry-standard security practices.

You may request deletion of your account or associated data by contacting us. Requests will be handled within a reasonable timeframe.

Cardly is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

This Privacy Policy may be updated from time to time. Changes will be posted on this page with an updated revision date.