Legal

Privacy Policy

Effective from 19 July 2026

1. Data controller

  1. The controller of personal data for users of Draw the Card is the private individual operating the Service (the "Operator"), based in Poland.
  2. For any matter concerning personal data, contact: postaw.karty@gmail.com

2. What data we collect

  1. Your email address and an optional display name — provided voluntarily when you create an account.
  2. Anonymous page-visit counts — with no way of identifying an individual person.

3. Why we process it

  1. Data is processed solely to provide the Service: managing your account and enabling its features.
  2. We do not process data for marketing purposes and we do not carry out profiling.

4. Legal basis

  1. Processing is based on your consent under Article 6(1)(a) GDPR, given by voluntarily creating an account.
  2. You may withdraw that consent at any time by requesting deletion of your account and data.

5. Storage and security

  1. Data is stored on secured servers located within the European Union. If you use the Service from outside the EU, your data is transferred to and stored in the EU.
  2. Passwords are stored in hashed form only — the Operator cannot read them.
  3. Data is retained until you delete your account, or until you request deletion at postaw.karty@gmail.com.

6. Sharing your data

  1. Personal data is never sold or shared with third parties for marketing purposes.
  2. To run the Service we use external infrastructure providers (hosting and AI text generation). These providers process data only on the Operator’s instructions and are bound by confidentiality obligations.
  3. Data may be disclosed only at the request of competent public authorities, where required by law.

7. Cookies and advertising

  1. The Service uses cookies to function correctly (for example, to keep you signed in).
  2. The Service uses Google Analytics, which uses cookies to collect anonymised traffic data (such as visit counts and referral sources). This data is not used to identify individuals.
  3. The Service may display third-party advertising, including Google AdSense. Advertisers may set their own cookies under their own privacy policies.
  4. On your first visit a banner informs you about the use of cookies — continued use of the Service constitutes acceptance.
  5. You can block cookies in your browser settings, though this may affect how some features of the Service work.

8. Your rights

  1. The right to access your personal data.
  2. The right to rectification of inaccurate data.
  3. The right to erasure (the "right to be forgotten").
  4. The right to restrict processing.
  5. The right to data portability.
  6. The right to lodge a complaint with the data protection supervisory authority in your country of residence if you believe your data is being processed unlawfully. A list of EU authorities is published by the European Data Protection Board; the Operator is established in Poland, where the authority is the President of the Personal Data Protection Office (UODO).
  7. To exercise any of these rights, contact: postaw.karty@gmail.com

9. Changes to this policy

  1. The Operator may update this privacy policy.
  2. Users with accounts will be notified by email of any significant changes.
✦

Questions? Write to postaw.karty@gmail.com

← Back to the home page