Legal

Privacy Policy

Last updated: 21 March 2026

Who we are

xCard (xcard.lol) is a personal project run by an independent developer based in Hungary. For GDPR purposes, we are the data controller for personal data collected through this service.

Contact:

What data we collect and why

DataWhy
Email address To create your account and verify your identity
Username & display name To identify your account and generate your card URL
Password Stored as a one-way hash - never readable, not even by us
Profile content Bio, links, theme - to display your public card
Analytics events View counts, link clicks, referrers - so you can see how your card performs
Hashed IP addresses To count unique visitors - hashed immediately, never stored in plain text

We do not sell your data. We do not use it for advertising. We do not share it with third parties beyond what is needed to run the service.

Who has access to your data

We use the following services to run xCard. Each holds only the data they need:

We may also share data if required by law or a valid legal authority request.

How long we keep your data

Cookies and local storage

We do not use tracking cookies or advertising cookies. We use browser localStorage to keep you logged in between visits - this stores a secure session token on your device. You can clear it by signing out or clearing your browser data.

Your rights (GDPR)

If you are in the EU, you have the right to: access your data, correct it, delete it, export it, or object to how we use it. To exercise any of these rights, email us at . We will respond within 30 days.

You can also complain to the Hungarian data protection authority (NAIH) at naih.hu.

Security

We use HTTPS everywhere, bcrypt password hashing, hashed IP storage, and signed session tokens. No security is perfect, but we take reasonable precautions to protect your data.

Children

xCard is not intended for children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

Changes to this policy

If we make significant changes, we will notify registered users by email before they take effect and update the date at the top of this page.

Contact

Questions about your data? Email us at