Privacy Policy

Effective August 14, 2026

The Thumbprint Card is a product of One-n-Done Web Solutions LLC ("we", "us"). This policy explains what information we collect when you use thumbprint.cards, and what we do with it. The short version: we collect what we need to run your card and nothing more, and we never sell it.

What we collect

Account details. Your name, email address, password, and the shipping address for your physical card. Passwords are stored hashed — we can't read them.

Your card content. Everything you choose to put on your card: name, title, company, contact details, social links, colors, and any photo or logo you upload.

Payment details. Payments are handled by Stripe. Your card number goes directly to them — we never see or store it. We keep a record of your subscription and its status.

Technical basics. A session cookie that keeps you signed in, and standard server logs (IP address, page requested, time) that we use to keep the service running and secure. We also count activity on card pages — taps, views, and contact saves — as anonymous totals: the type of event and when, never who.

Shared contacts. When someone uses "Share Your Info" on a cardholder's page, we store what they submit — name, email, phone, company — along with whether they agreed to receive messages sent on the cardholder's behalf, whether they separately agreed to receive text messages, and when. This information belongs to the account that holds the card: they can review it, save it, export it, and delete it from their dashboard.

Team accounts. On a business account, the account admin can see and edit the content of every card on the account, and sees the contacts shared through every card. A team member given edit access sees only their own card's content, activity totals, and shared contacts. If you carry a card issued by your employer, your card's content and its shared contacts are visible to your account admin.

Your card page is public

That's the point of the product: anything you publish on your card is visible to anyone who taps your card, scans your code, or has the link, and search engines may index it. Only publish what you're comfortable sharing. You can edit or take your card offline from your dashboard at any time.

How we use your information

We use it to run your account, host your card page, print and ship your physical card, process payments, and send you service email — verification codes, receipts, and notices about your account. We don't send marketing email, and we don't sell or rent your information to anyone.

Text messages

Some plans let a cardholder send a follow-up text message to a person who shared their contact info through their card. Texts are strictly opt-in: after someone chooses to share their info, a separate prompt asks — with plain yes and no buttons, nothing pre-selected — whether follow-ups are OK, and names texting explicitly when a phone number was given. Their info is delivered either way; declining changes nothing else. Message frequency varies, every message ends with opt-out instructions, replying STOP stops the messages immediately, and message and data rates may apply.

Thumbprint customers can separately opt in — from their own dashboard, with their own individual consent — to receive notification texts from Thumbprint about their account and about people who share info with them. That consent is optional, never a condition of any service, recorded with its timestamp, and revocable at any time by turning the setting off or replying STOP.

Texts are delivered through Twilio, our text-messaging provider, which receives only the phone number and message content it takes to deliver each one.

No mobile information will be shared with or sold to third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with or sold to any third parties.

Who we share it with

Only the services it takes to deliver the product: Stripe for payments, Twilio for delivering opt-in text messages, our hosting infrastructure, and the shipping carrier that delivers your physical card. Each receives only what it needs to do its job.

Cookies

We use one session cookie to keep you signed in, and your browser's local storage to remember your light/dark preference. No advertising or tracking cookies.

When someone views your card

Visitors who tap or scan your card are redirected to your card page. We keep standard server logs of those requests, but we don't build profiles of your visitors or track them across other sites.

Keeping and deleting your data

We keep your information for as long as your account exists. If your subscription ends, your card page goes offline but your design is saved so you can reactivate later. If you want your account and data deleted entirely, contact us and we'll take care of it.

Children

The Thumbprint Card is a business tool and isn't intended for anyone under 16. We don't knowingly collect information from children.

Changes to this policy

If we change this policy, we'll post the update here with a new effective date. Meaningful changes will be called out on your dashboard or by email.

Questions

Use the contact form on our home page — a real person reads it.