Privacy
Last updated 2026-05-13
What we collect
Email address — for sign-in only, via Supabase magic-link auth. Not used for marketing.
Profile content you enter — name, title, company, blurb, avatar image, contact links, accent colour. All of this is shown on your public `/show/<slug>` page.
Scan timestamps — anonymous count of when your card page is viewed. No IP, no scanner identity, no device fingerprint, no geo lookup.
What we don't collect
We don't log IP addresses on scans.
We don't identify who scanned your card.
We don't track you across the web.
We don't sell or share your data with third parties.
Where it lives
Profile data + scan counts: Supabase (Postgres) in ap-northeast-1 (Tokyo).
Avatar images: Supabase Storage (`visitka-avatars` bucket).
Authentication: Supabase Auth (magic-link).
Web viewer + mobile app source: github.com/riddles10/visitka.
Deleting your data
Email sam@getnifty.xyz and we'll delete your profile, links, and scan history. You can also delete your card from inside the app (Edit screen → Delete card). Deletion removes everything tied to your account immediately.
Contact
For anything privacy-related, email sam@getnifty.xyz.