Privacy Policy

1. Overview

Ucardly ("we", "us", or "our") operates ucardly.com. This Privacy Policy explains how we collect, use, and protect your information when you visit our website.

2. Information We Collect

2.1 Automatically collected

• Log data: IP address, browser type, pages visited, time spent — via Cloudflare and Google Analytics.
• Cookies: Small text files stored by your browser to remember preferences and measure traffic.
• Device info: Screen size, operating system, language preference.

2.2 Voluntarily provided

• Anything you send us by email, including your address and the contents of the message.

We do not collect payment information. All purchases are processed by Waffo, which acts as merchant of record and handles checkout, tax and receipts on its own pages. We never see your card details.

2.3 If you subscribe to the email alerts

To deliver the alerts we keep one row per subscriber. That row is the whole of it:

• your email address — the one on the Waffo receipt, because that is where the alerts go;
• subscription status (active, cancelling, cancelled, past due) and the plan name, so we know whether to send and can reconcile against Waffo;
• your email language (English or Chinese), which you choose at checkout;
• a flag for whether alerts are switched on, so the unsubscribe link has something to switch off;
• a random unsubscribe token, so the one-click link in every email works without you logging in anywhere;
• the Waffo order and subscription identifiers, for reconciliation;
• the dates the row was created and last changed.

We also keep, per subscriber, which condition state each rule was last in — that is what stops the same alert being sent twice — and a send log: which rule was sent, when, whether it succeeded, and the delivery id from our email provider. The send log holds no message content.

There is no name, no address, no phone number, and no payment data in any of this. We do not ask for them and Waffo does not pass them to us. We do not profile you, we do not track what you open, and we do not sell or share the list with anyone.

3. How We Use Information

• Analyze website traffic and improve content
• Respond to inquiries
• Detect and prevent abuse

4. Cookies & Tracking

• Google Analytics 4 — off until you say otherwise. The first time you visit, a bar at the bottom of the page asks. If you decline, or ignore it, the Google script is never loaded at all: no analytics cookie is written and Google is not told you were here. We do not even preconnect to Google's servers before you choose, because that alone would reveal the visit. Accept and we load it to see which pages people find useful.
• Cloudflare — serves the site and may set a cookie to tell real visitors from bots. This one is not optional; without it we cannot keep the site up.
• Your choice is stored in your browser's local storage under ucardly_consent — not in a cookie, and never sent to us. Clearing site data makes the bar appear again.

There are no advertising cookies, no ad network, and no social or tracking pixels on this site.

5. Third-Party Services

We link to external sites (card providers, exchanges, regulators). We are not responsible for their privacy practices. Notable third parties:

• Waffo — merchant of record for report purchases and for the alert subscription. Their privacy policy applies at checkout and to the order page where your download lives. They hold the billing details; we do not.
• Resend — sends the alert emails. Your address and the message reach Resend because that is how the email is delivered. They process it on our behalf and for nothing else.
• Cloudflare — hosts the site and holds the subscriber database (Cloudflare D1). The data stays inside Cloudflare's network.
• Price data sources — our converter and quote tools show live rates. Your browser asks our server for them, not the data provider, so the provider never sees your IP address. We fetch from Coinbase and the European Central Bank (and CoinGecko where configured), and we never send them what you typed into a tool.

6. Data Retention

Analytics data is retained according to Google Analytics' default settings (14 months). Emails you send us are kept as long as needed to deal with what you wrote about; ask us to delete them and we will.

Subscriber rows. Unsubscribing switches the alerts off but keeps the row, so that the unsubscribe link cannot be reused against you and so the send log still reconciles against Waffo's records. If you want the row itself gone, ask and we will delete it — the address, the state, and the send log with it. We will do that even while a subscription is still running; it means the alerts stop for good, and you should cancel the billing at Waffo as well. Otherwise cancelled rows are deleted once they are no longer needed for reconciliation, which is 24 months after the last charge.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion
• Object to processing

Contact: chenshiwei509@gmail.com

8. Changes to This Policy

We may update this policy as the site evolves. Changes will be posted here with a revised date.

9. Contact

For privacy-related questions: chenshiwei509@gmail.com