Privacy

Keycard is operated by [OPERATOR NAME, address, registration number]. If you want anything on this page actioned, write to [CONTACT EMAIL].

What we store about hosts

Your email address, the guides you write, and a record of any purchase. That is the complete list. There is no password, because sign-in is a one-time link sent to your email.

What we store about guests

Nothing. Opening a guest guide creates no account, sets no tracking cookie and records no identifier. The language a guest picks is remembered in their own browser and never reaches us.

Processors we use

• Payments — Stripe. Card details go straight to Stripe; we never see or store them.
• Hosting and database — the infrastructure provider named in our deployment configuration, inside the EU where the provider offers it.
• Email — a transactional email provider, used only to send sign-in links.
• Translation — when you translate a guide, its text is sent to a language model provider for that purpose only. Copyable values such as wi-fi passwords and door codes are excluded from what is sent.

Analytics

If analytics are enabled on this deployment, they are cookieless and aggregate: page counts, no personal profiles, no cross-site tracking.

Your rights

Under the GDPR you can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Deleting your account deletes your guides, which unpublishes their guest pages. We answer within 30 days.

Retention

Guides are kept while your account exists. Sign-in links expire after 20 minutes and are single use. Purchase records are kept as long as tax law requires.