Privacy
Privacy policy
Last updated 7 October 2026. Plain version: we keep what a card needs to work, we don't sell it, and you can delete it.
If you tap or open a NotCard
- We count the visit (and taps on its buttons) so the owner can see how their card is doing. These counts are deleted after 30 days. We don't store your IP address or device details. A one-way code that changes every day is used to tell visitors apart, and it can't be traced back to you.
- If you press "Leave my details" or answer an invitation, we store the name, email or phone number and message you type. Only the card's owner can see it, and they can delete it. It is wiped if they release the card.
- Link previews made by apps like WhatsApp or iMessage are not counted.
If you own a NotCard
- You sign in with LinkedIn. We receive your name, email address and profile photo, and a LinkedIn account identifier. We don't post to LinkedIn and can't read your connections or messages.
- We store what you put on your card: links, bio, contact details, any invitation, and the card's statistics.
- If email alerts are switched on, we send you an email when someone leaves their details. That email contains what the visitor typed and is delivered through an email service provider.
- Releasing a card removes its profile, links, statistics and replies. To delete your whole account, email us.
Who handles data
NotCard is hosted on Railway. Sign-in is provided by LinkedIn. Alert emails, when enabled, go through Resend. We don't sell personal information or use it for advertising.
Cookies
One cookie keeps you signed in, one carries the sign-in step, and one remembers (for 30 days) which card's "Get yours" link brought you here, so that card's owner is credited if you join. No advertising or tracking cookies.
Your choices
To see, correct or delete personal information we hold about you, email williamdwkong@gmail.com. If you left your details on someone's card, you can also ask the card's owner to delete them.