Privacy

Last updated 3 November 2026

Only what it takes to make and ship your shirt and run your QR code. We don’t sell your data.

Scope

This policy covers shop.date-card.app. DateCard cards at date-card.app have their own policy.

What we collect and why

What	Why
Your design: the words, first name, age, handles and DateCard link you choose	To print your shirt and show your scan page.
A phone number, only if you print one or turn on “Text me”	To check it’s yours, print it, and show it to people who tap “Text me”. Never for marketing.
Checkout details collected by Stripe: name, email, shipping address	To charge you, ship your order and email you about it. We never see your card number.
Order records: what you bought, its status and tracking	To fill and support your order, and for tax and consumer-protection records.
What you agreed to: when you confirmed you and the wearer are 18 or older and accepted the terms, and which terms (their last-updated date). If you print a phone number, also that it’s yours.	Kept with your design and each order of it, to show what was agreed if a question or dispute comes up.
Print files and the mockup of your shirt	To print it.
Scan counts: one number per QR code per day	Your scan stats. No IP address, device, location or time of day is kept.
Reports: what you tell us, and your email if you give it	To deal with the problem.
Your IP address	To stop abuse: rate limits while a request is handled, and daily limits on reports, text codes and lookups of shirt codes that don’t exist, which keep a keyed fingerprint of the address (never the address itself) for about two days. Logs hold short error notes, not personal details.

Phone numbers

We use a number only to verify it, print it, and power “Text me”. We never text you marketing. When someone asks us to block a number, we keep a keyed fingerprint of it, not the number, so it can’t be printed again. A report that names a number we haven’t blocked yet keeps that number with the report, so a person can check it.

Cookies and tracking

We don’t set cookies, and we don’t use ad pixels, analytics scripts or session recording. When you finish checkout, and on the page where you manage your QR code, your browser keeps your manage link in its own storage on your device so that page opens without asking again. You can remove it from that page.

How long we keep it

Order records, including the design, what you agreed to and the shipping details: as long as we need them for taxes, refunds and disputes, and at least 4 years.
Print files and mockups: deleted from our storage automatically 60 days after upload, and usually within a few days when a checkout is abandoned. Printful keeps its own copy under its policy.
Designs you don’t order, with their QR code: deleted automatically 60 days after you made them or last started checkout.
Scan counts: as long as the QR code exists.
A “Text me” number: until you remove it, or we do to protect someone, or, if we never checked it, when the order closes without printing.
Reports: as long as we need them to handle the problem and prevent repeat abuse.

Your choices

Ask us for a copy of your data, to correct it, or to delete it: email hello@date-card.app. We’ll delete what we aren’t required to keep. Deleting what a scan page holds switches its QR code off for good.

Children

The shop is not for anyone under 18. If we learn we have data about someone under 18, we delete it. For a scan page that means erasing what it holds (the profile, any “Text me” number, the scan counts and the manage links); its QR code stays switched off for good and is never reused.

Security

Payments happen on Stripe’s secure checkout page. The site only runs over HTTPS, and we keep as little as we can. Treat your manage link and order link like passwords.

Changes and contact

If we change this policy, the date at the top changes. Questions: hello@date-card.app.

Owner TODO: the business mailing address for privacy requests.

Terms of Sale and Use · Returns and refunds · Shipping · Safety and content rules · Questions and sizing