Privacy Policy

Data collected automatically

We also automatically collect:

• Your IP address, used to limit abusive access attempts (protection against spam and attacks).
• Your approximate country (from network headers, not the IP itself), used to suggest the display currency for prices.
• Necessary and functional cookies, and, with your permission, analytics cookies — see full details in our Cookie Policy.
• If you accept analytics cookies, we use Google Analytics to understand in aggregate how the site is used (pages visited, time spent browsing).
• We use Sentry to monitor technical errors on the site. In production, a small sample of sessions may be recorded to help us fix problems; text and media are masked by default in these recordings.

How we use your data

We use the data we collect to:

• Process your purchase, generate the card link, and deliver it to your chosen recipient(s).
• Securely process payment through Stripe.
• Respond to messages sent through the contact form.
• Protect the site against abuse, spam, and unauthorized access attempts.
• Understand how the site is used and fix technical issues, when you allow analytics cookies.

Who we share your data with

We never sell your personal data or share it for third-party marketing purposes. We only share what's necessary with the service providers below, who help us run Joy Game Card:

• Stripe — processes card payments. Your credit card details never pass through our servers.
• Firebase / Google Cloud — authenticates your account and securely stores data in our database.
• Resend — delivers the emails containing the card link to recipients.
• Sentry — monitors technical errors on the site. Sensitive data (passwords, tokens, and cookies) is automatically stripped before being sent.
• Vercel — hosts the site.

These providers only receive the data strictly necessary for the service they perform and may not use it for their own purposes.

How we protect your data

We use the following technical security measures:

• Encrypted (HTTPS) connection enforced across the entire site.
• Session cookies protected with the HttpOnly, Secure, and SameSite attributes, which prevent access by malicious scripts.
• Card links use randomly generated, unpredictable tokens — never sequential ones.
• Rate limiting on public routes to prevent automated abuse.

How long we keep your data

We keep your purchase and contact message data for as long as needed to provide the service and comply with legal and tax obligations. If you delete your account, your purchased cards and profile data are permanently and immediately erased; we retain only a minimal record of the deletion event (date and account identifier) for security and audit purposes.

Your rights

You can request access to, correction of, portability of (receiving a copy of your data in a structured format), or deletion of your personal data at any time, and withdraw your consent for analytics cookies (see our Cookie Policy). To exercise these rights, contact us through our contact page or use the account deletion option in the user menu.

Children's privacy

Joy Game Card is intended for a general audience buying digital cards as gifts. We don't collect data directly from children: the recipient's name and message are provided by the person making the purchase, not by the child.

Changes to this policy

We may update this policy from time to time. We'll always post the latest version on this page.