Privacy Policy

Effective date: June 11, 2026

acard.page is operated by Sandpiper Media Group.

What we store

Your Bluesky DID and handle.
The email on your Bluesky account (with its verified status) when you grant the email permission at sign-in.
Your card content: title, company, phone number, theme (including any custom theme CSS), custom fields, and display preferences such as whether to show your recent Bluesky posts.
Contact details that people submit through your card’s share-back form (and, in reverse, details you submit through others’ cards).
A one-time payment record (Stripe customer and payment IDs) if you buy Pro.

What we don’t store

Your Bluesky password or login credentials — sign-in happens on your Bluesky provider via OAuth.
Your card payment details — handled entirely by Stripe.
Advertising or cross-site tracking cookies — the only cookie we set is your session.

Analytics

We use cookieless, aggregate web analytics (Vercel Web Analytics) to understand visit counts and page performance. It does not use cookies or identify you across sites. Our hosting provider also keeps standard server request logs.

Where it lives

Data is stored with our hosting and database providers (Vercel, Supabase) and payments are processed by Stripe. Your public Bluesky profile (name, avatar, bio) is fetched live from the AT Protocol network and not stored as a source of truth. If you enable the recent-posts option, visitors’ browsers fetch your public posts directly from Bluesky’s public API when they view your card.

Email updates

We may use the email on your account to send service announcements (such as material changes to these policies or to the service) and occasional product updates or newsletters. Marketing-style emails always include an unsubscribe link, and opting out never affects essential service or legal notices.

Business transfers

If Sandpiper Media Group or the acard.page service is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the protections of this policy. We’ll post notice of any change in ownership here.

Email matching

If someone shares their info on a card and later signs up with a Bluesky account whose verified email matches, we link those past submissions to their new account. Unverified emails are never matched.

Rate-limit hashing

We store a salted hash of the submitting IP address for share-back submissions, used only for abuse prevention; the raw IP is not stored.

Your choices

You can export your contact book anytime, and you can delete your account and its data yourself from Settings. Questions or requests: acard@sandpipermediagroup.com.

Changes

Material changes will be posted here with a new effective date.