Privacy
Updated 7 October 2026
Information we collect
Your application can contain your name, phone number, account email, requested card specification, profile details, customer notes, payment proof/reference and delivery address when you choose delivery. You can build a card without an account. Until you choose to save your profile before payment, its details and selected images stay in this browser’s device storage. After authenticated saving, the private draft belongs to your account and can be recovered on another device. Submitted applications enter the staff review inbox. Details shared on WhatsApp are shared with EdgeTap there. Account passwords are handled by our account service and are not stored in order records.
Public profiles and private orders
Your activated profile name, bio, location, photo and contact links are public. Uploaded avatar image files have public URLs even before profile publication; upload only a photo you intend to share publicly. Drafts, order addresses, payment receipts and artwork are restricted to their customer and authorized EdgeTap staff and are not shown on public profiles. Customer-visible review messages appear in your account; internal staff notes remain private. A profile may load an image from the URL supplied by its owner.
How information is used
We use order information to review payment, prepare your card and coordinate delivery. Your account lets you update your activated profile. NFC and QR both open the public profile; this application does not collect tap analytics.
Services and browser storage
EdgeTap uses Supabase for accounts, profiles, orders and uploaded files, and Google Firebase Hosting to serve the website. Authentication uses browser storage to keep you signed in. Unfinished guest cards use IndexedDB device storage for details and selected images, with a seven-day recovery window checked when you return. Anyone using the same browser/device may access an unclaimed local draft; use a trusted device or Clear device draft. Browsers may clear local data, and blocked/full storage may prevent saving. A successful authenticated account save removes the device copy where browser deletion succeeds. Account drafts then use the protected account service; a draft identifier may appear in the URL for recovery. Passwords and payment proof are never saved in the guest draft. Authentication browser storage still contains session credentials, so use a trusted device and sign out on shared devices. Fonts are hosted with the site.
Questions and requests
Contact EdgeTap on WhatsApp to request access, correction or deletion of your information. Sign in to update your public profile. This application does not use advertising or analytics trackers.