Privacy policy

1. Who is responsible

CardBunny, 33800 Bordeaux, France, SIRET 753 806 413 00021, is the controller of personal data used by cardbunny.co, cardbunny.mx and cardbunny.fr. For questions about this policy or your information, use our contact form.

2. Information we use and why

We use your email address, website, language, verification status and access entitlements to manage your account and provide cards and paid passes. We use sender and recipient names, messages, selected designs and card dates to create and display your cards. These details are needed for the features you request; without the required information, we cannot provide those features.

Stripe handles your card details and payment processing. CardBunny does not store any payment-card details: card number, expiry date or security code. We keep only Stripe references and transaction records (amount, currency, status and dates) to activate passes, handle refunds and meet legal obligations.

Providing account and card features is based on performing our contract with you. Security, abuse prevention, support and catalog improvement rely on our legitimate interests. Records needed for legal or accounting duties are processed to meet those obligations.

Contact inquiries include your subject, message and contact email, and are stored in our private support dashboard so we can handle your request. For signed-in users, the inquiry is linked to their verified account; guest email addresses are unverified. Submitting the form saves an inquiry and does not send a support email or an email receipt. We process support inquiries to respond to service requests, meet legal duties where applicable and, otherwise, pursue our legitimate interest in helping visitors. We retain them while handling the request and any related dispute or recordkeeping obligation. Use our contact form to request access or erasure.

3. Shared links, feedback and searches

Anyone who has a published card link can view and forward its content. A sender may enter information about a recipient; that information comes from the sender. Avoid including sensitive or confidential information. Disabling a link prevents normal public access but does not erase stored content or copies held by others.

We record when a card is first opened and may show that status to its sender. This does not identify the viewer or count every viewing. Operational logs may include network and request information for security and troubleshooting.

Feedback is linked to your account and available to authorised administrators; it is not automatically published as a review. We also retain unanswered search phrases and aggregate counts to improve the catalog. Please avoid personal details in search text.

4. Cookies and service providers

Cookies support sign-in, card creation and form security. A sign-in session lasts up to 30 days. We do not currently use advertising cookies or third-party audience analytics. Stripe checkout is subject to Stripe’s own cookie and privacy information.

Authorised operators and infrastructure providers process information needed to run and support the service. Postmark receives email addresses and transactional email content to deliver sign-in messages. Stripe receives checkout and payment information. Google Fonts receives browser requests, including IP addresses, when fonts load. Published card content is shared with link holders. We may disclose information where legally required.

Some providers process information outside the European Economic Area. Use our contact form for information about the providers and contractual transfer safeguards applicable to your data. Provider privacy information is available at https://postmarkapp.com/privacy-policy, https://stripe.com/privacy and https://policies.google.com/privacy.

5. How long information is kept

We retain account and card information to provide your account, access and shared cards; feedback and search information support service improvement. Retention also depends on unresolved support or disputes, security needs and legal recordkeeping duties. There is currently no automatic deletion period for accounts or published cards. You can ask us to close your account or erase information.

If you prepare a card before verifying your email address, we keep that draft available for 24 hours so you can finish. Without verification during that time, the draft expires and is then deleted automatically. This time limit does not apply to published cards.

Sign-in links expire after 15 minutes and sessions after 30 days; expiry does not itself erase the associated record. Postmark normally retains message content and activity for 45 days, subject to its settings and terms.

Disabling a card is different from deleting it. We may retain restricted payment or dispute records where the law requires them. Contact us to discuss erasure and any records we need to keep.

6. Your choices and rights

Depending on the processing and applicable law, you can request access, correction, erasure, restriction or portability, or object to processing. Where consent is used, you can withdraw it. Mexican users may also request access, rectification, cancellation or opposition under applicable law. We do not sell personal messages or use them for advertising profiles.

Use our contact form with the website concerned and your request. We may ask for proportionate information to verify identity. For GDPR requests, we respond within one month unless a lawful extension applies, which we will explain. You may complain to the CNIL at https://www.cnil.fr/fr/plaintes or your competent data-protection authority.

7. Security and updates

We use access controls and expiring sign-in links to protect accounts. No system can guarantee absolute security. Please protect access to your email account and share card links carefully.

We update this policy when our practices change, date the changes and inform you of significant changes affecting your information. Use our contact form with any questions.