Privacy policy

Effective October 3, 2026 · Ahlchemy Author Company, State of Missouri, USA

Draft modeled on attorney-reviewed templates — have counsel review before relying on it, especially the Pro cloud-sync section, which covers data not yet collected.

The short version

• CardKeep shows no ads and runs no third-party trackers.
• We never sell, rent, or share your card list, and we never use your data to train AI/ML.
• The free tier keeps everything on your device. No account, no upload.

Who we are

CardKeep is operated by Ahlchemy Author Company ("we", "us"), State of Missouri, USA. For any privacy request or question, contact admin@ahlchemy.org.

What stays on your device

Your cards, card numbers, names, colors, notes, categories, tags, and settings are stored locally in your browser (localStorage) on the device you use. They are not transmitted to us. Clearing your browser's site data, or uninstalling the app, removes them — so keep a backup (Settings → Export).

What reaches our servers

• Hosting (Cloudflare). Pages are served by Cloudflare, our edge/hosting sub-processor, which processes standard request data (such as IP address and user-agent) to deliver the app and protect against abuse, over TLS 1.3. Cloudflare retains transient operational logs on the order of days. We use only Cloudflare's privacy-friendly aggregate metrics; we run no ad or analytics trackers and set no advertising cookies.
• Feedback you send. If you use the feedback form, the message you type (and the release number) is sent so a human can read it. Please don't include full card numbers in feedback.

Pro cloud sync (not yet active)

Cross-device sync, household sharing, and cloud backup are optional, paid features that are not active in this release. If you later choose to enable them, only then would your cards be stored in our backend (Cloudflare) to sync across your devices, under terms and disclosures presented at that time. We would never use that data for advertising or AI training. New risk surface — attorney review required before launch.

Cookies, Service Workers & local storage

CardKeep uses a Service Worker and localStorage to work offline and remember your cards and preferences on your device. These are essential to the app's function and are not used for tracking. We set no advertising or cross-site cookies.

Data retention & your controls

• On-device data stays until you delete a card, clear the app's site data, or uninstall.
• You can export all data at any time (open JSON) and delete it yourself — see Delete your data.
• Feedback messages are kept only as long as needed to respond and improve the app.

Your privacy rights

Depending on where you live (including under the CCPA/CPRA and similar U.S. state laws), you may have rights to access, correct, or delete personal information, and to opt out of sale/sharing. Because the free tier stores your data only on your device, you can exercise most of these directly in the app. For anything else, contact admin@ahlchemy.org. We do not sell or share personal information as those terms are defined by these laws.

Children

CardKeep is a general-audience utility and is not directed to children under 13, and we do not knowingly collect their personal information.

International / export

CardKeep uses only standard transport encryption (TLS); it includes no proprietary cryptography. Data may be processed on Cloudflare's global edge.

Changes

We may update this policy; material changes will be reflected by a new effective date here. Continued use after an update means you accept the revised policy.

Contact

Ahlchemy Author Company — admin@ahlchemy.org. A human answers. Support: thomasahl@live.com.

← Back to the app