Privacy Policy

• Customer name, email, and shipping address (for fulfillment)
• Stripe payment token (we never see your full card number)
• Uploaded child photo (used only to generate the card)
• Player details (name, jersey number, team, league, city)
• IP address and consent timestamp at checkout

Strictly to generate your card, process payment, and ship the physical product (when applicable). We do not sell your data, share it with advertisers, or use it to train any AI models.

Uploaded photos are deleted by default. The photo you upload is used to generate your card and is then automatically deleted from our servers: within hours for abandoned sessions, within 7 days for completed solo cards, and within 30 days for team orders (kept briefly so you can come back and finish a purchase). If you’d like us to keep your uploaded photos — so reorders don’t need a fresh upload — you can opt in under Account → Settings → “Uploaded photos,” and change that choice anytime.

Generated card images (the finished cards) are retained in private storage so you can re-download or reorder them. You can request permanent deletion of your child’s photos and cards at any time by replying to your order confirmation email; we delete them and log the action for audit purposes.

• Stripe — payment processing
• OpenAI — AI image generation
• EasyPost — shipping label generation and tracking
• Resend — order confirmation emails
• Print fulfillment partner — receives the card image and shipping address only, for the purpose of producing and shipping your order

With your consent, we use advertising measurement tags (Google Ads, Meta) on our marketing and checkout pages to understand whether our ads led to a purchase. These tags receive page visits and standard purchase events (order value) — never uploaded photos, player names, or card content, and they do not run on family card-sharing pages. You can opt out anytime via the “Do Not Sell or Share My Personal Information” link in the footer, and we honor the Global Privacy Control browser signal automatically. See the Cookie Policy.

This service is not directed at children under 13. Parents and legal guardians submit data on behalf of their children. We do not knowingly collect data directly from children.

California residents have the right under CCPA to request access to, deletion of, or correction of their personal data. To make a request — including a request to permanently delete your child’s card image from our storage — reply to your order confirmation email. We will action the request and keep an internal log of who performed the deletion and when.