Legal
Privacy Policy
Last updated: June 4, 2026
This policy explains how Gibbor Cards collects, uses, shares, and protects information when we provide NFC cards, QR codes, hosted digital profiles, vCards, contact exchange, order fulfillment, and related services.
Information we collect
- Profile and account information, such as name, email, phone, company, title, website, social links, profile photos, logos, and other content you ask us to publish on a Gibbor Cards profile.
- Order and fulfillment information, such as product selections, customization notes, shipping details, production status, and support messages.
- Card and device information, such as hardware IDs, public profile URLs, QR codes, NFC programming status, lost or replacement status, and scan source.
- Usage and scan information, such as profile views, NFC taps, QR scans, vCard saves, link taps, browser type, user agent, referrer, timestamps, approximate location from IP, and hashed IP address where appropriate.
- Contact exchange information when a visitor chooses to send their details to a profile owner, such as name, email, phone, company, message, consent, source, and follow-up status.
How we use information
- To create, host, update, and display digital profiles connected to NFC cards and QR codes.
- To fulfill orders, program cards, generate QR codes, manage production, ship products, and provide support.
- To generate vCards, allow visitors to save contact details, and support optional contact exchange or follow-up requests.
- To measure basic engagement, including scans, profile views, link taps, vCard saves, and source attribution.
- To prevent abuse, protect the service, troubleshoot errors, comply with legal obligations, and improve Gibbor Cards.
Public profile content
- Digital profile information is meant to be shared. If a profile is public, anyone with the link, QR code, or NFC card may be able to view the profile.
- If card-only access is enabled, the profile is still accessible through the card-specific NFC or QR URL. Do not add private information to a public profile unless you are comfortable sharing it.
- The profile owner controls what contact fields are shown publicly and what fields are included in the vCard when supported by the product.
How we share information
- We may share information with service providers that help us operate the product, including hosting, database, email, analytics, file storage, printing, shipping, payment, and ecommerce providers.
- Shopify or another storefront provider may process store, checkout, payment, and shipping information when you buy a product from us.
- We may share information if required by law, to protect our rights, to prevent fraud or abuse, or as part of a business transfer.
- We do not sell profile owner contact information as a standalone product.
Cookies and analytics
- We may use cookies, local storage, server logs, and similar technologies to keep the site working, remember preferences, protect accounts, understand usage, and support ecommerce checkout.
- If we use third-party analytics or advertising tools, those tools may process browser and device information according to their own policies.
Your choices
- You may request access, correction, or deletion of personal information we hold about you, subject to legal, security, fraud prevention, and operational limits.
- Profile owners may request updates to profile content, QR destinations, public-link visibility, and vCard fields.
- Visitors who submit contact exchange information may ask us to help remove or correct that information where required or appropriate.
- You can opt out of marketing emails by using the unsubscribe link or contacting us.
Security and retention
- We use reasonable administrative, technical, and organizational measures to protect personal information.
- No internet service is perfectly secure. We keep information for as long as needed to provide the service, maintain records, resolve disputes, prevent abuse, and meet legal obligations.
- We avoid collecting sensitive personal information that is not needed for the product.
Children, state rights, and international users
- Gibbor Cards is not intended for children under 13.
- Depending on where you live, you may have privacy rights under state, federal, or international law. We will review valid privacy requests according to applicable law.
- If you use Gibbor Cards from outside the United States, your information may be processed in the United States or other locations where our providers operate.
Contact
For privacy requests or questions, contact Gibbor Technologies at support@gibbor.cards.