Privacy

Only what we need to give you a price, check your card and pay you:

• Your email address, so your orders are yours and we can send you codes and updates.
• Your card's details: brand, country, value, and the code or PIN you enter.
• A photo of the card, if it's a physical card. We remove the location and camera details from the photo before keeping it.
• For prepaid Visa, Mastercard and Amex cards: the long number, when it expires, the 3 or 4-digit code on it, and a picture of each side.
• Where we pay you: your PayPal or Skrill email, Revtag, Zelle email or phone, $cashtag, or wallet address; for the bank, your IBAN or CLABE (or, in the US, routing plus account number) and whose name the account is in.
• Messages you send us on your order page, photos included.
• A little technical data: a session cookie that keeps your price and order connected to your browser, and normal server logs.
• Visit statistics: which pages you open and in what order, where you came from (including campaign tags), your browser, language and screen width, and your IP address with the rough location it points to (country, sometimes city). To recognise a return visit, your browser stores a random code in its local storage, not in a cookie; clearing your browser's data for this site deletes it. These numbers help us run the site and catch fraud, nothing else. Never ads, and there are no outside trackers.

We never ask for your home address or ID documents. A name is asked for bank payments only, since banks won't send money without the holder's name.

• To work out your price, create your order and lock the price.
• To check cards and stop fraud, like stolen or already-used cards.
• To pay you and let you follow your order.
• To email you about your order: confirmations, questions from our team, messages, and payment or rejection notices.
• To answer you when you contact us.

Before anything is saved, we lock it with AES-GCM encryption: codes and PINs, card pictures, your order chat (photos too), and your bank details with the holder's name. They never go into your browser's storage or our logs, and only our review team sees them, in its admin tool and in its private order alerts. After you send them, the site only shows the last few characters of each code and bank account.

Nobody from SpareCards emails you asking for a code. An email like that is a scam.

We don't sell your data. We only share it with the companies that help us run SpareCards, and only what each one needs:

• Cloudflare, which hosts the site, carries its traffic and runs the human check on our forms;
• Supabase, where orders and files are stored and which sends the sign-in codes;
• Resend, which delivers our emails: it sees your address and a summary of the order, but no codes, pictures or payment details;
• Telegram, which carries our team's internal order alerts, codes included so cards get checked fast, but never your email or payment details;
• the payment service you pick (for example PayPal, Revolut or Cash App, or the blockchain for crypto);
• the authorities, when the law requires it.

Crypto payments are public by nature: anyone can see the address and amount on the blockchain.

We keep order records as long as we need to finish the order, sort out any problem, and meet our legal and anti-fraud duties. You can ask us to delete anything we don't have to keep.

Write to support@sparecards.com from the email address on your orders to get a copy of your data, fix it, or have it deleted.

SpareCards is run by SpareCards. Privacy questions go to support@sparecards.com.