Privacy policy
Last updated October 22, 2026
Card Mailer prints and mails cards. To do that it needs the names and addresses of the people you send cards to, your photo and your message. This page explains what we keep, why, and for how long.
What we collect
- Recipient names and postal addresses that you give us.
- Your card: the photo, greeting, message and signature.
- Your return address, if you add one.
- Payment details, handled by Stripe. We see your email and the last four digits of your card, never the full card number.
- Basic logs (IP address, browser) kept by our hosting provider for security, for up to 30 days.
- Usage counts: how often each page and feature is used per day, by country and by app (for example ChatGPT or Claude). These counts contain no IP addresses, names, addresses or card content.
How we use it
Only to check the addresses, print your cards, mail them, show you their status, and answer your questions. We do not sell or rent any of it, add recipients to any list, or contact them. Your recipients will only ever receive the card you sent.
Who we share it with
- Lob (Lob.com, Inc., USA), our print and mail partner, receives each recipient's name and address and your card artwork to print and mail it, and checks addresses against USPS data.
- Stripe processes payments.
- Cloudflare hosts this service and stores the data.
How long we keep it
- Recipient addresses, photos and messages are deleted 30 days after the send date, so you can see delivery status in the meantime.
- Lists and designs that are never ordered are deleted after 14 days.
- Order records (date, number of cards, amount paid) are kept for accounting as required by law.
ChatGPT and Claude
When you use Card Mailer in an AI assistant, the assistant sends us only what is needed for the card and the list. We return the card preview and the recipient list you gave us, and nothing more.
Your choices
You can ask us to delete your data at any time, or ask what we hold, by emailing cards@onmax.me. If you are a recipient and want your address removed from an order, email us as well.