Regardstone Privacy Policy
Effective date: October 2, 2026
Regardstone, LLC ("Regardstone", "we", "us") runs regardstone.com. This policy explains what information we handle when you send a card, receive one, or visit the site, and what we do with it.
The short version
- We collect only what we need to deliver a card: names, email addresses, your note, and payment confirmation.
- There are no accounts, no advertising, no analytics, and no tracking pixels.
- We never sell personal information, and we never add recipients to any marketing.
- We delete notes and recipient details after a short period. Section 6 has the details.
- Anyone, including a person who received a card and never used the site, can ask us to delete their information by writing to hello@regardstone.com.
1. What we collect
If you send a card
| What | Why |
|---|---|
| Your name | It appears on the card, so the recipient knows it's from you. |
| Your email address | To send your receipt and to contact you about that order (a delivery problem or a refund, for example). |
| The recipient's name and email address | To deliver the card. |
| Your note | To show it to the recipient with the card. |
| Which card you sent, the price, and when | Order records, receipts, refunds, and accounting. |
| Payment confirmation from Stripe | To know the card was paid for. See "Payments" below. |
Payments. Payment happens on Stripe Checkout, a page run by Stripe. We never receive or store your full card number. Stripe tells us whether the payment succeeded and may share limited details such as the email you gave Stripe, your billing postal code, and your card's brand and last four digits. Stripe handles your payment information under its own privacy policy.
If you received a card
You didn't sign up for anything, so here is exactly what we have about you: your name and email address as the sender typed them, the sender's note, which card was sent, and when. We also receive basic technical data when you open the card page (see below). We don't record whether or when you opened it. We don't ask you for anything else, and the card page has no forms, no analytics, and no trackers.
If you just visit the site
- Technical data. Like every website, our hosting provider (Cloudflare) receives your IP address, browser type, and the pages you request. We use it to run the site, keep it secure, and limit abuse, for example by capping how many cards one connection can send.
- CAPTCHA. The send form uses Cloudflare Turnstile to check that you're a person rather than a bot. Turnstile looks at signals from your browser and device to do this. It is not used for advertising. See Cloudflare's privacy policy.
Stored in your own browser
When you send a card, your browser keeps a short list of your sends (which card, the recipient's first name, the price, and the date) in its local storage, so the Your Sends page can link back to your receipts. It doesn't include addresses or notes. It stays on your device, and we can't see it or delete it for you. You can erase it with "Clear my history" on the Your Sends page, or by clearing your browser's site data.
Cookies. We don't use advertising or analytics cookies. Cloudflare may set strictly necessary security cookies to protect the site from bots and attacks.
2. How we use information
We use it only to:
- deliver cards and show them on their private pages;
- take payment, send receipts, and handle refunds and support;
- prevent and investigate spam, harassment, fraud, and other abuse, including keeping a list of addresses that have asked not to receive cards;
- keep the site working and secure; and
- meet legal, tax, and accounting obligations.
We don't use your information for advertising, we don't build profiles, and we don't sell it or "share" it for cross-context behavioral advertising. We don't send marketing emails to recipients, ever. We don't send marketing to senders either. If we ever want to, we'll ask first and you can say no.
We don't read notes as a matter of routine. We may look at a specific card when someone reports it, or when we need to in order to fix a problem you've asked us about.
3. Who sees it
- The recipient sees your name, your note, and the card. They don't see your email address.
- Anyone with the card's link. The link is long and random, and search engines are told not to index card pages, but it isn't password-protected. Anyone the recipient forwards it to can see the card, your name, and your note.
- Our service providers, who process data for us under contracts and only to provide their service:
| Provider | What they do | What they handle |
|---|---|---|
| Cloudflare | Hosting, our database of orders, sending the card and receipt emails, Turnstile CAPTCHA, rate limiting, DNS | Everything stored for an order; technical data from visits |
| Stripe | Payments for paid cards | Payment details you give Stripe; order amount and ID |
The card email itself carries your name, the recipient's name, and the link. Your note is only on the card page, never in the email.
- The law. We may disclose information if the law requires it, for example in response to a valid subpoena or court order, or when we believe in good faith that it's needed to protect someone from harm.
- If the business changes hands, information may transfer to the new owner, who must honor this policy for information already collected.
4. Emails to recipients
Card emails are one-time transactional messages sent because someone chose to send you a card. They aren't marketing. Each one identifies Regardstone, includes our mailing address, and has a link to stop receiving cards from Regardstone (it works while the card's page is up; after that, or any time, write to hello@regardstone.com). If you use that link, we'll add your email address to our do-not-send list and future cards to it will be refused. We keep that list so we can keep honoring your request, which is why we can't simply delete your address in that case.
5. Security
The site uses HTTPS. Order data is stored with our hosting provider, and access is limited to the people who run Regardstone. Our database provider encrypts stored data at rest. Card links are long random identifiers that can't practically be guessed, and card pages ask search engines not to index them. No system is perfectly secure, though, and we can't guarantee that information will never be accessed without permission. If a breach affects your information, we'll notify you as the law requires.
6. How long we keep it
| Information | How long |
|---|---|
| The recipient's name and email address, the sender's name, the note, and the card page | Deleted 90 days after the card is sent. After that the link shows that the card has expired. |
| Order record (card, price, date, payment ID, sender email) with no note or recipient details | 7 years, for tax and accounting |
| Do-not-send list | As long as needed to honor the request |
| A card someone reported, and the report | Up to 1 year after the report, or longer if needed for a legal claim or investigation |
| Technical and security logs | Up to 30 days |
Our service providers keep some records under their own policies. Stripe, for example, must keep payment records by law. Copies of a card that a recipient saved, or of the email in their inbox, are outside our control.
7. Your choices and requests
Whether you sent a card, received one, or just visited, you can email hello@regardstone.com to:
- get a copy of the information we hold about you;
- delete it: a card you sent, a card sent to you, or everything tied to your email address;
- correct something that's wrong; or
- stop receiving cards from Regardstone (recipients can also use the link in any card email).
To protect you, we'll ask you to confirm the request from the email address involved. We'll respond within 30 days. Some records may be kept after a deletion request where the law requires it, such as payment and tax records, or to honor a do-not-send request. If we keep anything, we'll tell you what and why.
Senders: deleting a card you've already sent disables its page. It can't pull back an email that has already reached the recipient's inbox.
8. State privacy laws
Several states, including California, have comprehensive consumer privacy laws. Most of them apply only to businesses above certain size thresholds, such as annual revenue or the number of residents whose data is processed. At Regardstone's current size, we don't expect most of them to apply to us. We'd rather not rely on that, though. Everything in section 7 is available to anyone, in any state, and we don't sell or share personal information for advertising, so there is nothing to opt out of. If one of these laws does apply to us, we'll honor the rights it gives you and update this policy.
Do Not Track and Global Privacy Control. We don't track visitors across other sites, so these signals don't change anything we do.
9. Children
Regardstone isn't directed to children under 13, and we don't knowingly collect personal information from children under 13. Senders must be at least 13, and at least 18 to buy a card without a parent's permission. A card can be sent to a person of any age. When the recipient is under 13, our Terms require the sender to be their parent or guardian or to have their permission. The card page asks the recipient for nothing. If you're a parent or guardian and believe we hold information about your child that you'd like removed, email hello@regardstone.com and we'll delete it.
10. Where data is processed
Regardstone is for people in the United States. Our providers may process data in the US or in other countries where they operate, under their own safeguards.
11. Changes to this policy
If we change this policy, for example to add text-message delivery, we'll post the new version here with a new effective date. If a change affects how we use information we already have in a meaningful way, we'll give notice on the site first, and where the law requires it, we'll ask for your consent.
12. Contact
Regardstone, LLC 2108 N St Ste N, Sacramento, CA 95816, USA hello@regardstone.com