Privacy Policy

Last updated: 6 October 2026. This policy explains what Group Card Online (https://groupcardonline.com), operated by Birim Web Ajansı, collects and why.

What we collect

• Card data you enter: recipient name, card title, organizer name, signer names, messages and uploaded images. We ask you to use first names only and not to upload photos of people who would not want them shared.
• Technical data: a hashed (one-way, non-reversible) version of the IP address of each message, used only to detect abuse. Standard server logs are kept for up to 30 days.
• Local storage: your browser remembers the cards you created or signed. This never leaves your device.

We do not ask for email addresses, phone numbers or accounts.

Who can see what

Anyone with the card link can see the title, all visible messages, signer names and images. Anyone with the signing link can add a message and see the title and message count. The organizer link additionally shows hidden messages and controls. All card pages are marked so that search engines do not index them.

Retention

Cards and images are kept for at least one year after the last message and may be deleted afterwards. You can ask us to delete a card at any time by emailing the link to aydin@birimajans.com.

Cookies and measurement

Updated 6 October 2026. We use Google Analytics 4 to understand which pages are popular. It loads when you open a page; it does not wait for you to press a button. Google receives the page address with game, card and link identifiers replaced by placeholders and query details removed (only campaign tags such as utm_source are kept); on Group Card Online pages that belong to a user, the page title is replaced with the site name. Google LLC may process this data in the United States. Legal basis: our legitimate interest in measuring the site (GDPR Art. 6(1)(f)).

To refuse, press Reject on the notice at the bottom of the page or use Cookie preferences in the footer (open now). Google Analytics then stops immediately, its cookies set on this domain are deleted and it is not loaded on later pages. Your choice is kept for 12 months in the km_cerez cookie. The site does not currently show ads.

Children

The site is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has entered personal information, contact us and we will remove it.

Your rights

Under GDPR, CCPA and similar laws you may request access to, correction of, or deletion of data about you. Because we do not hold accounts, the practical way to do this is to send us the game link. We respond within 30 days.

Contact

Birim Web Ajansı, Maltepe, İstanbul, Türkiye. Email: aydin@birimajans.com.