Privacy
There are no accounts. We never ask for your name, and we never see a card number. Your wallet is stored in your own browser; the only thing that ever leaves your device is what you choose to sync or send us.
Last updated July 31, 2026.
What stays on your device
Which cards you hold, who holds them, your category picks, credit check-offs and logged spend amounts are saved in your browser's local storage. Clear your browser data and it is gone — we cannot recover it, because we never had it.
What a household code sends
If you create or join a household code, that same state is copied to our sync service so a second device can read it. The code is three random words and a number, generated with a cryptographic random source. It is not derived from anything about you, it is not tied to an email, and there is no way to search or enumerate codes. Anyone who has your code can read and write that household's state, so treat it like a shared password — share it with your partner, not the internet. You can leave a household from My Cards at any time, which stops the device from syncing.
The synced document contains card names, holder labels you typed (e.g. "J"), toggles, check-offs and spend totals you logged. It never contains card numbers, expiry dates, CVVs, account numbers, balances, statements or transactions — the app has no way to ask for them and no bank connection of any kind.
Error reports
If you send a correction with the "Report an error" button, we store the text you typed, the page you sent it from, and the contact you optionally provide. That is the only place you can hand us an email address, it is used to reply to you about the correction, and it goes on no mailing list.
Analytics and tracking
None. There is no analytics script, no advertising pixel, no third-party embed, and no cross-site tracker on this site. We do not set cookies. If we ever add privacy-respecting aggregate analytics, this page will say so before it ships.
Hosting and logs
The site and its sync service run on Cloudflare (Pages, Workers, and Workers KV) in the United States. Cloudflare processes requests on our behalf and keeps standard, short-lived operational logs — IP address, timestamp, user agent — for delivery, security and abuse prevention (we also use the IP for rate limiting). We do not join those logs to household data, and we do not build profiles from them.
Children and contact
UseThis is not directed at children under 13 and we knowingly collect nothing from them. Questions, or want a household's stored state deleted? Use the with the household code and we will delete it.