This Privacy Policy describes how your personal information is collected, used, and shared when you visit favecard.co (the “Website”) or use the FaveCard platform.

1. General Information

This policy applies to the Website operating at: favecard.co

The operator of the Website and the Administrator of personal data is:

Łukasz Fryc ul. Ślusarska 6/85, 30-710 Kraków, Poland Email: admin@favecard.co

The Administrator processes personal data in accordance with the General Data Protection Regulation (GDPR).

The Website and the FaveCard platform use personal data for the following purposes:

Operating the FaveCard platform (digital loyalty cards for Apple Wallet and Google Wallet)
Providing customer support via live chat
Analyzing website traffic and conversion
Communicating with business customers (account-related emails)

2. What Data We Collect

Website Visitors

When you visit favecard.co, the following data may be collected:

Analytics data: Page views, referral source, browser type, country (collected via Plausible Analytics — a privacy-friendly service that does not use cookies and does not collect personal data)
Conversion tracking: If you click the “Try” button and have accepted non-essential cookies, an anonymized conversion event is sent to Google Ads (ID: AW-17296092581). This uses cookies and requires your consent (see Section 7).
Chat conversations: If you use the live chat (powered by Crisp), your messages and any information you provide are stored by Crisp.
Form data: If you fill out a contact or signup form, the data you provide (name, email, business name) is stored in our systems.

Business Customers (Dashboard Users)

If you create a FaveCard business account, we collect:

Account information (name, email, business name)
Billing information (processed by Stripe — we do not store card details)
Loyalty program configuration (card design, reward rules)

Loyalty Card End Customers

If you are an end customer who installed a digital loyalty card, a separate privacy policy applies to you. A separate privacy policy for loyalty card customers will be published here soon.

3. Data Protection

Personal data is transmitted using SSL encryption.

Data stored in our database (Google Cloud Firebase/Firestore) is encrypted at rest. Access is restricted to authorized personnel only.

User passwords are stored in hashed form using Firebase Authentication industry-standard hashing.

We perform regular backups and keep all software components up to date.

4. Hosting and Infrastructure

The Website (favecard.co) is hosted on Netlify (Netlify Inc., USA).

The FaveCard platform (dashboard, API, data storage) runs on Google Cloud Platform (Firebase/Firestore), with primary data storage in the EU region (europe-west1).

These providers may log server-level data (IP addresses, request timestamps, URLs) for technical reliability purposes.

5. Your Rights

Your personal data is processed for no longer than necessary. Marketing data is not processed for more than 3 years.

You have the right to request from the Administrator:

Access to your personal data
Rectification of inaccurate data
Erasure of your data
Restriction of processing
Data portability

You have the right to object to processing based on legitimate interests, including profiling, unless there are overriding legitimate grounds for the processing.

To exercise your rights, contact: admin@favecard.co

You may file a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Providing personal data is voluntary but necessary to use the Website and the FaveCard platform.

6. Third-Party Services

We use the following third-party services:

Service	Purpose	Cookies	Location
Plausible Analytics	Privacy-friendly website analytics	No	EU
Google Ads (Tag Manager)	Conversion tracking	Yes	USA
Crisp	Live chat support	Yes	EU (France)
Stripe	Payment processing	Yes (on checkout)	USA
Firebase / Google Cloud	Platform hosting and data storage	Session cookies	EU / USA
Resend	Transactional emails (account verification, billing)	No	USA

For transfers of data outside the European Economic Area, we rely on Standard Contractual Clauses (SCCs) or the service provider’s compliance with applicable data protection frameworks.

We do not sell your personal data to third parties.

7. Cookies

When you first visit our Website, a cookie consent banner is displayed. Non-essential cookies are not set until you give your consent. This applies globally to all visitors.

The legal basis for non-essential cookies is your consent (Art. 6(1)(a) GDPR, ePrivacy Directive Art. 5(3)).

We use the following categories of cookies:

Essential (always active):

Session management (after login)
Language preferences
Cookie consent preferences (cc_cookie, expires after 182 days)

Analytics & Advertising (requires your consent):

Google Ads conversion tracking (_ga, _gcl_*, _gid cookies)
These cookies measure the effectiveness of our advertising campaigns

Cookie	Purpose	Duration
`_ga`	Distinguishes visitors for Google Analytics	2 years
`_gcl_*`	Google Ads conversion tracking	90 days
`_gid`	Distinguishes visitors for Google Analytics	24 hours
`cc_cookie`	Stores your cookie consent preferences	182 days

We use Google Consent Mode v2 to respect your cookie choices. When you reject non-essential cookies, Google receives no tracking data from your visit. Google may use modeled conversions based on aggregated, anonymized trends.

7.3 Other Services

Plausible Analytics does not use cookies. It collects anonymous page view statistics only.
Crisp Chat operates in deferred cookie mode — cookies are only set when you actively open the chat widget.

7.4 Managing Your Preferences

You can change your cookie preferences at any time by:

Clicking “Cookie Preferences” in the website footer
Using your browser’s cookie settings

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top indicates the last revision.

9. Contact

For privacy-related questions: