Menu

Legal

Privacy Policy

Last updated: August 16, 2026

Who we are

Card Blueprints is operated by Cassidy Rice (Cassidy Rice Company). We offer personalized Cardology reports, digital products when available, and free birth card tools at cardblueprints.com. Questions about this policy can be sent to [email protected].

What we collect and why

Personal Card Blueprint information

Stripe Checkout collects the buyer’s email address and the birth date entered for the Personal Card Blueprint. The birth date is used to generate the deterministic report and is included in a signed access token sent in the transactional email. We do not maintain a separate customer birth-date database, but Stripe, Resend, and Cloudflare may process the checkout field, email link, or request URL under their retention and logging policies.

Legacy phone-order information

Phone-reading products are no longer sold. For purchases made before retirement, order and access records may include the buyer’s name, email address, phone number, payment time, amount, and checkout session. These records are retained only for the original access window, support, accounting, disputes, and legal obligations. They are not used for marketing or sold.

Payment information

Payments are processed by Stripe. We do not store your card number, CVV, or full payment details. Stripe's own privacy policy governs how they handle your payment data. From checkout we may receive your name, email address, the Blueprint birth date, amount paid, and checkout session reference. Historical orders may retain the phone number that was collected when those products were available.

Free tools

The birth card calculator, compatibility calculator, and period tools run entirely in your browser. No birth date you enter into these tools is transmitted to our servers or stored.

Free course and email list

When you request the free Read Your Birth Card course, we collect the name and email address you submit. We use them to create a Resend contact, deliver your signed course access link, and send occasional Card Blueprints educational or product emails under the consent shown on the signup form. You can unsubscribe from marketing emails at any time.

Privacy-conscious site analytics

We use Cloudflare Web Analytics for page traffic and performance, plus a first-party conversion event stream to understand whether visitors use the calculator, view the Blueprint offer, begin checkout, or complete a purchase. The event stream uses a random identifier created for and reused only within the current browser tab. It does not store analytics cookies, birthdays, calculated cards, names, email addresses, phone numbers, full referrer URLs, IP addresses, or user-agent strings. Cloudflare retains these custom events for up to three months. If you begin checkout, the same random identifier and non-personal source labels may be attached to the Stripe Checkout Session solely to connect a completed purchase to the earlier funnel. Stripe may retain that checkout metadata under its own transaction-retention rules and privacy policy.

We also use Google Analytics 4 (GA4) to measure aggregate traffic and conversion events across the main site and compatibility pages. GA4 may set Google analytics cookies and process standard device and usage signals. We configure the tag with IP anonymization where available, disable automatic first-hit pageviews in favor of path-based SPA pageviews, and strip sensitive query parameters (such as access tokens, emails, and birth dates) before they are sent as page locations. We do not intentionally send names, emails, phone numbers, birth dates, or signed access tokens to Google. Google’s processing is governed by the Google Privacy Policy and How Google uses information from sites that use its services.

Elroy micro-reading

Elroy is an on-site chat guide. After you see your free birth card, you may choose to request a short personalized micro-reading. That request sends the birth date you enter to our server for one response only so the reading can be built. We do not keep an application birth-date database. We collect the email you submit, with your consent, to add you to the Card Blueprints contact list, show the reading in chat, and email you a copy. Resend delivers that message and future educational or product emails you opt into. Analytics events for Elroy do not include birth date, card, or email.

On-site reading pages

The on-site reading, story, and deep-dive pages are different: they send the birth date to our server so the text can be generated for it. That request is processed to build your response and is not saved to a database — we operate no birth date store. Standard Cloudflare request logs still apply, as described below.

Server logs

Our hosting infrastructure (Cloudflare) may log standard technical data such as IP addresses and request metadata for security and performance purposes. These logs are governed by Cloudflare's privacy policy.

How we use your information

  • To generate and deliver the Personal Card Blueprint and its signed return link.
  • To send your purchase confirmation and start-here instructions by email.
  • To deliver the free course and, when you explicitly request it, send occasional Card Blueprints educational and product emails.
  • To support and honor legacy phone orders during their original access windows.
  • To follow up on questions or support requests about a purchase, if you ask.

We do not send marketing emails unless you explicitly opt in, build advertising profiles, or share data with data brokers.

Third-party services

We use the following services whose privacy policies apply to data they process on our behalf:

Privacy choices

Privacy choices

Optional Google Analytics stays off until you allow it. First-party conversion events stay in this browser tab and never include a birth date.

Cookies

Card Blueprints does not use advertising cookies and does not track you across other sites for advertising. Google Analytics scripts load only after you allow analytics in Privacy choices. First-party conversion events stay in this browser tab (sessionStorage) and never include a birth date. Birth dates used to continue checkout are also tab-scoped sessionStorage — they are not written into URLs, prefetch requests, or analytics locations. Cloudflare may set security-related cookies (such as __cf_bm) as part of bot protection.

How long verified records are kept

  • Legacy voice access profiles: through the original purchased window, up to 90 days; no new profiles are created.
  • Order records: up to 400 days for support and accounting.
  • Tab-scoped conversion analytics: up to three months.
  • Google Analytics data: under Google’s Analytics data-retention settings for the Card Blueprints property.
  • Stripe checkout attribution metadata: under Stripe’s transaction-retention rules.
  • Free-course subscriber contacts: until you unsubscribe or request deletion, subject to records we must retain for legal or abuse-prevention reasons.

Your rights

You can request that we delete the information tied to your purchase or free-course signup at any time by emailing [email protected] with the email address used at checkout and, for a legacy phone order, the original checkout phone number. We will confirm deletion within a reasonable time, except for records we must keep for legal, tax, fraud, or payment-dispute reasons.

Changes to this policy

If we make material changes to this policy, we will update the date at the top. Continued use of the site after a change constitutes acceptance.

Contact

Privacy questions: [email protected]