Privacy
Last updated November 6, 2026
What never leaves your device
Everything you put on your card — name, phone numbers, email, address, social profiles, photo, logo — and any CSV file you load for a team. The card, the QR code, the .vcf file and the PDF are made by JavaScript in your browser and downloaded from there.
Card links
A card link looks like fastcardgen.com/c/#…. Your details are compressed into the part after the # (the fragment). Browsers never send the fragment to a web server, so our server only sees that someone opened /c/. Anyone who has the link can read the details in it — share it like you would share a business card.
What our server receives
- Anonymous counters: for example “a .vcf was downloaded” or “a card link was opened”, counted per day. No content and no IP address are stored.
- Pro purchases: your email, the license key, the pass type and the payment status. Card details are handled by Stripe and never reach us. A random browser ID (hashed) is stored with your key to enforce the 5-browser limit.
- Contact form: what you write and your email, to answer you.
- Server logs: errors only, kept 30 days. Rate limits use a salted hash of your IP, deleted after 2 days.
In your browser
The site keeps your card draft (so you can come back and edit it), your license key and a random browser ID in your browser's local storage. Clear your site data — or use “Clear the form” — to remove them.
We only email license keys you bought or asked for again, and replies to your messages. Email is sent through Amazon SES.
Analytics
We don't use third-party analytics or advertising cookies.
Questions or deletion
Ask us to delete your purchase record (we must keep payment records required by tax law) through the contact page.