Privacy policy

Who is responsible

The MultiCard service (mcard.com.ua) and the MultiCard apps for iOS and Android. For anything about your data, write to us from the Support section in the app or to the address listed on the site.

What we store

Account: email, first and last name, phone number (if you add one), and your password as a one-way hash. We never see or keep the password itself.

Sign-in with Google or Apple: the identifier of your account in that service and the email it passes to us. We never receive your password for those services.

Technical details: the IP address and time of account creation and of the last sign-in, used to limit abuse.

Your cards: name, address, description, category, tags, background and every block with its content — text, links and images you upload.

Statistics: how many times a card was viewed and its buttons tapped, broken down by day. We do not record who viewed a card.

Form submissions: what the visitor wrote, plus their IP address and browser details, so you can reply and tell spam apart.

Telegram notifications, if you connect them: the chat identifier and your Telegram username.

Payments: the fact of an order, its amount and date. Card details are handled by the payment provider and never reach us.

If you take payments on a card: the seller details you published yourself (name, tax number, email, phone, refund terms, offer) and records of invoices — amount, purpose, state, time, plus the payer's name and comment if they left them. Access keys to your payment service are stored encrypted. The payer's card details never reach us.

Why we do it

So you can sign in and use your account.

So your card can be shown to visitors and its views counted.

So form submissions and event notifications reach you.

So paid features work for those who subscribed.

To limit abuse: request rate limits and checks on uploaded files.

What others see

A published card is available to anyone with the link and may appear in the Community section after moderation. Everything you put in blocks becomes public — do not add anything you would not show.

A disabled card is visible to you alone.

Who else receives data

The hosting and servers that run the service, and the mail provider that sends confirmation letters.

Telegram — only if you connect notifications yourself.

Google Maps, YouTube and Giphy — when you add a map, a video or a GIF: their content loads from those services.

Google Analytics, Facebook Pixel and TikTok Pixel — only if you enter your own identifiers in the card settings. Those services then see visits to your card.

We do not sell data and do not pass it on for third-party advertising.

How long we keep it

Account data and cards live as long as your account does. Email confirmation and password reset codes are kept only for the short time the check needs. Statistics are stored per day and hold no personal details about visitors.

Deleting your account

You can delete your account in the app: Settings → Delete account. It removes your cards, blocks, uploaded images, form submissions, statistics and the Telegram link. This cannot be undone.

Your rights

You can review and change your data in settings, withdraw consent for notifications, delete single cards or the whole account. If you need a copy of your data, write to support.

Cookies and storage

We keep the sign-in token, your chosen language and theme, and small panel preferences in the browser. We have no advertising cookies.

Children

The service is not intended for children under 13.

Changes

If this policy changes, we will update the date on this page. Significant changes will be shown in the app.