Privacy Policy

Last updated September 16, 2026

Your privacy, in plain terms:

Your card is public by design — what you put on it, anyone with the link can see.
We show no third-party ads, use no trackers, and never sell or share your data. The only thing we ever point you to is another Rolled Off product, in our own footer.
Your data is encrypted at rest and in transit, and we keep personal data out of our logs.
You can delete everything in one step, any time.

1. Who we are

rolledoff.com ("we", "us") provides a service for creating and sharing a public digital business card. For any privacy question or request, email vcard@rolledoff.com.

2. What we collect

The card details you enter — such as your name, title, company, phone, email, website, links, and photo. You decide what to add; you can leave any field blank.
Account information — the email address or Google sign-in identifier you use to log in, so we can tie a card to its owner.
Basic technical records — operational logs that deliberately exclude personal data. We log an action name, a request identifier, an internal account identifier, and an error type — never your name, email, phone, or the contents of your card.

3. How we use it

Only to run the service: to build and serve your public profile page, vCard, and QR code; to sign you in and keep your account secure; and to operate, maintain, and improve reliability. We do not use your data for advertising or profiling.

4. Your profile is public

A digital business card exists to be shared. The details on your card are published on a public web page and included in the downloadable contact file and QR code. Please add only information you are comfortable making public. You control what goes on the card and can edit or remove it at any time.

5. What we never do

No advertising and no third-party ad networks.
No analytics or advertising trackers, and no cross-site tracking.
No selling, renting, or trading your personal data.
No behavioral profiling.

6. Cookies

We use only the essential cookies needed to keep you signed in when you log in to manage your card. We do not use advertising or analytics cookies, so there is nothing to track and no consent banner to click through. If we ever add non-essential cookies, we will ask for your consent first and update this policy.

7. How we protect your data

Your data is encrypted in transit (HTTPS/TLS everywhere) and encrypted at rest by our cloud provider. We keep personal data out of our application logs. To be honest about what encryption can and cannot do here: because your card is served publicly and our systems must read your data to display it, this is not end-to-end or "zero-knowledge" encryption, and we do not claim otherwise. We aim to protect your data with sensible, industry-standard controls — no security is absolute. If a security breach affects your personal data, we will notify you and any regulators as required by applicable law.

8. Your rights and controls

Edit — change or remove any field on your card at any time.
Delete — erase your entire profile, its files, and your account in one step. This is immediate and permanent.
Export — download your card as a standard vCard file.
Access — request a copy of the personal data associated with your account.

Most of this is available directly in the app. For anything else, email vcard@rolledoff.com.

9. How long we keep your data

We keep your card and account for as long as you have an account. When you delete your profile, we remove your card details, associated files (photo, vCard, QR), and account record. Routine backups and logs age out on a short cycle.

10. Services we rely on

We host the service on Amazon Web Services (cloud hosting and storage). If you choose to sign in with Google, Google processes your sign-in. We do not share your data with anyone else.

11. Children

This service is not directed to children, and you must be old enough to enter into these terms in your jurisdiction (at least 13). If you believe a child has provided us personal data, contact us and we will remove it.

12. U.S. and California residents

We operate the service from the United States. Because we do not sell or share your personal data and show no third-party ads or trackers, several common concerns simply do not apply here. Regardless of where you live, you can access, export, and delete your data as described above. California residents have rights under the CCPA/CPRA, including to know, delete, and opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information, and we honor access and deletion requests for everyone. To exercise any right, email vcard@rolledoff.com.

13. Changes to this policy

If we make a material change, we will update this page and revise the date above. Continued use after a change means you accept the updated policy.

14. Contact

Questions or requests: vcard@rolledoff.com.