Privacy Policy

Effective date: March 15, 2026 · Last updated: March 15, 2026

This Privacy Policy explains how MyCardBatch ("we", "us") collects, uses, and protects your information when you use our Service at mycardbatch.com.

1. Information We Collect

Account information: When you register, we collect your name, email address, and a hashed (not plain-text) version of your password. This data is stored in your browser's local storage on your device.

Card images: Images you upload for scanning are transmitted to our Cloudflare Worker and stored in Cloudflare R2 object storage for up to 365 days, after which they are automatically deleted.

Usage data: We store batch export history and token transaction history locally in your browser (IndexedDB / localStorage). Login timestamps are also stored locally for admin reporting purposes.

Payment information: When you purchase credits, payment is processed by a third-party payment provider (Stripe). We do not receive or store your card number, expiry, or CVV.

Feedback: If you submit feedback through the help widget, your message and email address are forwarded to us via email.

2. How We Use Your Information

To provide and operate the Service (AI card scanning, CSV generation, credit management).
To send transactional emails: account verification, password resets, and purchase receipts.
To send service announcements when necessary (e.g. downtime, major changes).
To respond to support requests submitted through the feedback widget.

3. Data Storage and Security

Account data (name, email, hashed password, credits, batch history) is stored in your browser's local storage. It does not leave your device except as described in this policy.
Card images are stored on Cloudflare R2 servers in the United States and are automatically deleted after 365 days.
Passwords are hashed using SHA-256 before being stored. We cannot recover plain-text passwords.
All connections to our servers are encrypted via HTTPS/TLS.

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Cloudflare — infrastructure, image storage, serverless functions.
Resend — transactional email delivery.
Anthropic (Claude API) — AI image analysis for card scanning.
Stripe — payment processing (when real payments are enabled).

5. Email Communications

We send the following emails:

Verification email — sent once on signup to verify your address.
Password reset — sent only when you request it.
Purchase receipts — sent after a credit purchase.
Service announcements — sent occasionally for important service updates. You may opt out by contacting us.

We do not sell your email address or send marketing email to you without consent.

6. Data Retention and Deletion

Card images are deleted automatically after 365 days.
Account data stored in your browser persists until you clear your browser data or contact us to request deletion.
To request deletion of your account and any associated data we hold, email checkoutmycards603@gmail.com.

7. Cookies and Tracking

We do not use cookies or third-party tracking or analytics scripts. Session state is managed via browser localStorage only.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. Continued use of the Service after changes constitutes acceptance.

10. Contact

Questions or requests? Email us at checkoutmycards603@gmail.com.

← Back to MyCardBatch