Privacy

Last updated October 16, 2026

echocard is a small tool for making and sending digital greeting cards. This page explains what we keep and why, in plain terms.

What we collect

• Your email address, so we can send you sign-in codes. We never send marketing email.
• Your name, if you add one, to sign the cards you send.
• The cards you make: the design, the message, and who it's for.
• Photos you upload. We resize them in your browser and strip location data before they reach us.
• Sign-in details: the browser and device name for each signed-in session, and passkeys if you add them.
• Your IP address, briefly, to limit how often sign-in codes can be requested.
• Reports you send about a card: the reason, anything you add, and your email if you give it. The sender isn't told who reported their card.
• Visit statistics, only if you allow analytics cookies. See Analytics below.

What we do with it

We use it only to run echocard: to sign you in, show you your cards, show each card to the people who open its link, and let you see whether it has been opened. We don't sell your information, show ads, or use tracking cookies. The only cookie we set keeps you signed in.

Who can see your cards

Anyone with a card's link can open it, so share links only with the people you mean them for. Photos on a card are visible to anyone who opens it.

Services we use

echocard runs on Cloudflare. Your cards, account, and photos are stored in Cloudflare data centers in the United States, and pages are served from Cloudflare's network around the world. Sign-in emails are sent by Resend from the United States. Both process data on our behalf to provide those services.

Analytics

If you allow it, we use Google Analytics to count visits and see which pages people use, so we can make echocard better. It sets cookies in your browser and sends Google details like the pages you view, your browser, and your approximate location. We don't send Google your email, your name, or what you write in your cards. If you choose No thanks, Google Analytics never loads. You can change your mind at any time with the Cookies link at the bottom of the page.

Deleting your data

You can move unopened cards to the trash, delete uploads, and delete your whole account from the Account page. Deleting your account removes your cards, uploads, and sign-in details for good.

Changes

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about your data, or a request we can help with? Email hello@echocard.io.