Privacy Policy
Last updated 28 September 2026
rpcard is built to collect as little as possible. This page explains what we store, why, and what you can do about it.
What we collect
- Your account: your username and password. Passwords are stored hashed by our authentication provider; we can’t see them.
- Your profile: everything you enter, including your timezone and, if you use it, your 18+ preferences.
- Technical data: our hosting providers keep standard request logs (such as IP addresses) for security and to keep the service running.
- Cookies and local storage: only the cookies needed to keep you signed in. Your light/dark theme choice, and whether you’ve confirmed you’re 18 or older, are stored in your browser and never sent to us.
What we don’t collect
No email address, no real name, no analytics, no advertising or tracking cookies. We don’t sell or rent your data.
Who can see your profile
That’s up to you, in the Sharing tab. Public profiles can be viewed by anyone who knows your username; unlisted profiles only with your secret link; private profiles only by you. Your 18+ section can be limited to a separate link. Profiles are never listed in search engines or in a directory.
Service providers
We use Supabase for our database and sign-in, and Cloudflare for hosting. They process data on our behalf and may do so outside your country.
How long we keep it
Until you delete it. Deleting your account removes your account and profile from our live database straight away. Copies may remain in routine backups for a limited time before they expire.
Your choices
- See and change your data: everything is editable in your profile editor.
- Download your data: Account → Download my data gives you a copy as a JSON file.
- Delete everything: Account → Delete account.
Children
rpcard isn’t for anyone under 13, and its 18+ features are for adults only.
Changes
If this policy changes, we’ll update the date above. See also our Terms of Service.