Privacy Notice

Scope and contact

Polywick Graphics, PH, Corp., Philippines, operating as Polywick Studio, is responsible for the personal information it handles for cardgroove.app and customer communications about CardGroove. Contact us for privacy questions or requests.

Information we handle

• Website visits: hosting and network services process connection information such as IP addresses, requested pages and browser details to deliver and secure the websites.
• Enquiries: our CardGroove contact form and email communications contain the contact details, project information and messages you choose to provide. The contact form uses Netlify Forms.
• Purchases: transaction details can include your name, email, billing information, product, order reference and payment status. Where Paddle provides checkout, it processes payment and tax information and shares relevant order details with us.
• Licensing: products that use online activation may exchange licence and device identifiers with the licensing service to verify entitlements. Refer to the information supplied with that product; local file processing does not necessarily mean activation is offline.
• Support: we receive messages and any logs, screenshots or files you send. Remove passwords, private keys, payment card details and unnecessary confidential or personal information before sending attachments.

Contact form

When you submit the contact form, your name, email address, selected topic, optional tool or app version, subject and message are sent through Netlify Forms so we can respond. This is separate from local calculator processing. Do not include payment card numbers, PINs, private keys, passwords or confidential card data. Use synthetic examples for support.

CardGroove

Calculator and parser inputs

Calculations and parsing run in your browser using JavaScript. The tools do not upload your keys, PINs, messages, pasted data or selected file contents for processing. There is no server-side calculation fallback.

The application does not log calculator inputs or results, or deliberately save them to persistent browser storage. Values remain in the current page until changed, cleared or the page is closed. Copy and download buttons place results on your clipboard or in a file when you choose to use them.

Your browser may retain form values, history, cached pages or downloads independently. Clearing a result is not a secure-erasure guarantee. Use synthetic test data.

Website requests and reference searches

CardGroove is a static website, not a website without a server. Your browser requests pages, scripts, styles and reference datasets from the host. Those requests can expose your IP address, browser information and requested URL to the hosting or network provider. We cannot promise that the hosting infrastructure keeps no access or security logs.

BIN lookup requests a dataset file selected by the first three digits you enter. It does not send the full number or call a third-party BIN lookup service. ATR and AID search filters can appear in the page URL: those URLs may be retained in browser history, shared, or sent to the host when reloaded. Do not put secrets into reference searches or URLs.

Connected workflows

Keys and intermediate results in the connected workbenches are held in page memory. They are transferred only within that page, and are cleared when you use Clear workspace, refresh or leave. They are not placed in URLs, cookies, local storage or session storage. JavaScript cannot guarantee secure memory erasure; copied values remain in your clipboard until you replace them.

Cookies, preferences and analytics

CardGroove loads Google Analytics 4 only after you accept analytics. Google receives page-visit, browser, device and connection information and uses analytics cookies such as _ga. The website tag does not add tracking for calculator inputs, keys or results; it excludes query strings, fragments and referrer URLs from its initial page-view configuration. Advertising personalization and Google signals are disabled in the tag. Google may process information outside your country; see Google's Privacy Policy. Use Analytics preferences in the CardGroove footer to accept or reject analytics. Rejecting disables further collection and removes accessible analytics cookies on the CardGroove hostname, but does not delete data already collected. Your analytics choice is saved under cardgroove-analytics-v1 and your theme under cardgroove-theme. No session recording is installed.

Fonts and external links

Fonts are hosted with the site. Loading them does not contact Google Fonts or another font provider. Font license notices are available for DM Sans, Manrope and IBM Plex Mono.

References and attribution links lead to other websites. When you open one, that website’s privacy policy applies.

Offline use

Calculators can continue operating after their required scripts have loaded. Reference data and other resources may still need a network request. The site does not guarantee that every page or tool is available offline.

Questions and updates

For questions about CardGroove, use the CardGroove contact form. This policy will be updated when the site’s data handling changes; the date above identifies the current version.

Purposes, sharing and retention

We use relevant information to answer enquiries, fulfil purchases, administer licences, provide support, protect services and meet legal and accounting obligations. Depending on applicable law and the activity, processing relies on contractual necessity, legal obligations, legitimate interests in operating and securing our services, or consent where required.

Hosting, email, payment and administrative providers may process information for those purposes, including in other countries. We may disclose information when required by law. We retain it for as long as needed for the relevant request, customer relationship, security or mandatory records, then delete it or remove identifying details.

How long information is needed

Support messages and any supplied samples are kept for handling the issue and relevant follow-up. Purchase and licence records may need to remain available to support an active entitlement, resolve disputes or meet mandatory accounting requirements. Security records are retained for investigation and protection needs. These purposes differ, so there is no single retention period for every record.

You can ask about the records associated with your enquiry or order and request deletion of support attachments. We will explain any applicable retention requirement. Removing information from our systems does not remove a copy independently held by a payment provider or files on your own devices.

Your rights and privacy requests

Depending on applicable law, you may request access, correction, deletion or a copy of your information, or object to or restrict processing. Where we rely on consent, you may withdraw it. Contact us to make a request; we may verify your identity. Record-keeping obligations may limit deletion. You may also contact your local privacy authority, including the Philippine National Privacy Commission.

For information independently held by a payment provider or your organisation, contact that party. We will update the date above when this notice changes.

Use the contact form, state that your message is a privacy request, and identify the product or interaction concerned. We may ask for proportionate information to verify your identity and protect another person's records. Do not send identity documents or sensitive information unless we explain why they are needed.