Privacy Policy

• Your profile: name, title, bio, links, social accounts, contact details and anything else you add, the pictures you upload, and the username you choose for your link (it is public: it is part of the link).
• Your email address, for your login details, receipts, order updates and password-reset links.
• Payment details for an order: the name and mobile number you paid with, and the reference number. When you pay online, PayMongo handles your card or e-wallet details; we only receive the confirmation, the amount, how you paid (for example GCash or card) and the name and phone you gave PayMongo.
• Delivery details for card orders: the recipient, phone number and address.
• Feedback: the stars and note you give Mitkaz or leave after an order. Your email only if you leave it so we can reply (for a rating after an order, the order's email).
• Anonymous messages sent to a profile: the text, and a code made from the sender's connection so the owner can block them. The code cannot be turned back into an address, the address is not kept with the message, and the owner never sees who sent it.
• Team quote requests (the For teams & events page): your name, organization, email, phone if you give it, how many cards and your message, to send you a price.
• Contacts you share with a card's owner (“Share my contact” on a card): your name, the phone number or email you type, and your note, after you tick that you agree. Only that card's owner gets them (in their dashboard and by email). We keep a code made from your connection only to stop floods; it cannot be turned back into an address.
• Visit counts (no cookies, no address kept): when a page of the site or a card is opened, a counter goes up for that day, with how it was opened (an NFC tap, a QR scan, a link), phone or computer, and the city the network gives. A card's owner sees their own card's counts; nothing says who visited.
• Technical details: your IP address is checked to block too many sign-in, PIN, order or message attempts. It is not used to follow you around the web.

Only to build, show and maintain your profile, confirm your payment, deliver your card, reply to you, keep your account safe, and improve Mitsu Cards. We do not sell your information and we do not show ads.

Your profile is public at your profile link, unless you turn on the PIN lock: then only people with your 4-digit PIN can see it. Behind the PIN, visitors see a blurred look-alike of your card with nothing on it that can be read.

Anonymous messages are seen only by the profile's owner, until the owner answers one: then that message and the answer are shown on the profile. A contact you share from a card is seen only by that card's owner, who can keep it or delete it.

Your email, payment and delivery details are never shown on your profile. Only the Mitsu Cards team sees them, to process your order. We also use these services to run Mitsu Cards:

• Vercel hosts the website.
• GitHub stores the site's data in a private repository (the personal details above are encrypted there).
• Resend sends our emails.
• Upstash keeps the visit counts.
• Lalamove gets the recipient's name, phone number and address to deliver your card.
• GCash: you pay in the GCash app; we only see the payment details you give us.
• PayMongo processes online payments (QR Ph, GCash, Maya, cards). Your card or wallet details go to PayMongo, never to us.

Your account, order, payment, delivery and feedback details, anonymous messages waiting in an inbox, and contacts shared with a card's owner are stored encrypted. Passwords and PINs are stored only in scrambled (hashed) form, so nobody can read them, not even us. The site uses a secure connection (HTTPS), and your signed-in session ends when you close your browser.

We use no advertising or tracking cookies. The site only keeps what it needs to work:

• your sign-in, until you close the browser;
• a note of your order, so you can follow it;
• an unlocked card, for 30 minutes after the right PIN;
• your free trial, while it lasts, and an invite code you opened, for 30 days;
• small settings in your browser, such as a lighter mode for slower phones and whether you already gave feedback.

Your profile stays while your account is active. A free trial's content is deleted when the trial ends (5 days). An anonymous message stays until the owner deletes, answers or blocks it (an inbox keeps the latest 200). A shared contact stays until the card's owner deletes it (the latest 500 are kept), or the card is deleted. Order records are kept for our accounts and as the law requires. Feedback is kept to improve Mitsu Cards.

Under the Data Privacy Act of 2012, you can ask to see the information we hold about you, correct it, or have it deleted, and you can object to how it is used.

You can change your profile anytime in the portal. To have your account and profile deleted, email mitsukazuwara1112@gmail.com or use any channel on the Support page: we delete them within 30 days. Order records we must keep for our accounts and the law stay until they are no longer needed.

If you are under 18, please use Mitsu Cards with the permission of a parent or guardian.

We may update this policy; the date at the top shows the latest version.

Questions about your information? email mitsukazuwara1112@gmail.com or use any channel on the Support page.