Privacy

Last updated 2026-05-13

What we collect

Email address — for sign-in only, via Supabase magic-link auth. Not used for marketing.

Profile content you enter — name, title, company, blurb, avatar image, contact links, accent colour. All of this is shown on your public `/show/<slug>` page.

Scan timestamps — anonymous count of when your card page is viewed. No IP, no scanner identity, no device fingerprint, no geo lookup.

What we don't collect

We don't log IP addresses on scans.

We don't identify who scanned your card.

We don't track you across the web.

We don't sell or share your data with third parties.

Where it lives

Profile data + scan counts: Supabase (Postgres) in ap-northeast-1 (Tokyo).

Avatar images: Supabase Storage (`visitka-avatars` bucket).

Authentication: Supabase Auth (magic-link).

Web viewer + mobile app source: github.com/riddles10/visitka.

Deleting your data

Email sam@getnifty.xyz and we'll delete your profile, links, and scan history. You can also delete your card from inside the app (Edit screen → Delete card). Deletion removes everything tied to your account immediately.

Contact

For anything privacy-related, email sam@getnifty.xyz.