Legal
Privacy
Last updated 5 September 2026
Draft pending legal review. This text follows common practice for comparable products but has not been reviewed by an attorney. It is not legal advice and should not be relied upon as final terms.
Short version
We collect the minimum needed to sell and ship you a card. There are no accounts. Cloudflare traffic measurement is cookieless. Optional Google Ads purchase measurement stays off unless you allow it.
What we collect
- Order information — name, email, and shipping address, so we can print and post your order. We collect your delivery address before payment to check delivery eligibility and share it with Stripe for checkout and tax calculation. Paid order details are stored in our own database.
- Payment information — handled entirely by Stripe. We never receive or store your full card number.
- Email address, if you ask to be notified about new titles. Used only for that.
- Aggregate traffic data via Cloudflare Web Analytics, which is cookieless and does not fingerprint or identify visitors.
- Advertising measurement data, only if you allow it. The Google tag may receive the page URL, browser/device and network information, advertising measurement identifiers, and—after a verified purchase—the order value, currency, and a unique non-identifying Stripe Checkout Session ID. We do not send Google your name, email, shipping address, or payment details.
What we do not do
- We do not sell or rent your information.
- We do not use the Google tag for personalized advertising, remarketing, or customer-list audiences.
- We do not require an account.
- We do not collect health information about you or your patients. Nothing you buy tells us anything clinical about anyone.
Advertising measurement choices
Google Ads measurement uses basic consent mode. Before you allow it, the Google tag does not load and no data is sent to Google. If you allow it, the tag can store or read advertising measurement identifiers and record a completed purchase. A declined or unmade choice keeps the tag blocked.
Your choice is stored in your browser. Use Measurement choicesat the bottom of the site to review or change it. Google processes allowed measurement data under itsPrivacy Policy.
Who we share with
Processors used to operate the site and complete an order are Stripe for payment, Cloudflare for hosting, our email provider for order confirmations, and a postal carrier for delivery. Google receives advertising measurement data only after you allow it.
Retention
Order records are kept as long as needed for tax, accounting, and warranty purposes. Email list entries are kept until you unsubscribe.
Your choices
Every marketing email has an unsubscribe link. You can ask us for a copy of your data or ask us to delete it, subject to records we are legally required to keep.
Send privacy requests toorders@crashcard.co.