The Creative Card

Privacy

Privacy Policy

Last updated October 2026. This is the plain-language version of how we handle your information. It works together with our Terms.

The short version

  • You decide what goes on your card, and you can show or hide your contact, publishing and management details.
  • We never sell your information, and there are no advertising or tracking cookies on this site.
  • You can download everything we hold about you and delete your account yourself, any time, from your dashboard.

1. Who we are

The Creative Card is a digital ID for songwriters, producers and artists. Questions about privacy? Email info@thecreativecard.us, or contact us and choose “Help with my card” or “Something else”.

2. What we collect

What you give us.

  • Your account: your name, your login email and your password. Your password is stored only as a one-way scrambled value (a hash), so we cannot read it.
  • Two-step sign-in (only if you turn it on): we email a 6-digit code to your login email each time you log in. We keep only a scrambled copy of the latest code (for 10 minutes) and of your recovery codes, never the codes themselves.
  • Your card: anything you choose to add, such as AKA, role, genres, bio, photo, contact email, PRO and IPI numbers, publisher, manager and lawyer details, and links to your music and social pages.
  • Your releases: the songs you add (title, artist, cover, preview and links). When you paste an Apple Music link or search for a song, our server asks Apple’s public music catalogue for its details.
  • Who you share with: if you make your card private, the email addresses you allow to open it, and requests people send you.
  • Your wallet: the cards you save from other people, and any short note you add.
  • Messages: what you write in the Contact us form, with your name and email.

What we record as you use the site.

  • Website visits: we count how many times each public page is opened, which website sent the visitor, and how many different visitors there are each day. We use no cookies for this and keep no IP address. To avoid counting the same person twice in a day, we briefly keep a one-way scrambled value made from your IP address and browser details, mixed with a secret and the date. It can’t be turned back into your IP address, and it is deleted after 2 days. We don’t count people who send a “Do Not Track” or Global Privacy Control signal.
  • Card activity counts: that a card was opened, its QR code was scanned, a link on it was tapped, or it was saved to someone’s contacts, with the date. We do not store the visitor’s name, IP address or device with these. Automated crawlers are not counted.
  • One cookie: a strictly necessary cookie that keeps you logged in and protects forms from forgery. We use no cookies for analytics, advertising or tracking, and no third-party trackers.
  • Server logs: our hosting provider keeps standard technical logs (such as IP address and the page requested) for security and troubleshooting.
  • Errors and admin actions: when something breaks we record what went wrong (without card contents or secrets). Changes made by our staff in the back office are recorded so they can be reviewed.

3. How we use it

  • To run your card: show it the way you set it, make your QR code and contact file, and keep your account secure.
  • To list you in the Creative Card Database as described in the Terms (section 3).
  • To send the emails the service needs: confirming your email, claim and password-reset links, and access links for private cards. We do not send marketing email.
  • To prevent abuse and fix problems.

We do not sell your personal information or share it for advertising.

4. Who can see what

  • Anyone with the link can see your public card, with the sections you left switched on. If you make your card private, only people you approve can open it.
  • Companies in the Creative Card Database can see your name, AKA, role, genres, photo, bio and the music and social links on your card, and your contact, publishing and management details only if you leave those switched on. Your login email is never shown. Companies use the database under their own agreement with us, we record how it is used, and we limit how much they can export.
  • Our staff can see account information so they can help you. Only admin accounts can reach it, and what they change is logged.

5. Companies that help us run the service

We use other companies to host the site and its database and, as the service grows, to deliver our emails, to store and deliver photos, and to protect the site (a content delivery and security provider). They handle your information only to provide those services to us. If we add another kind of provider, we will update this page.

6. How long we keep it

  • Your account and card: until you delete your account.
  • Card activity counts: up to about 13 months, then they are deleted automatically.
  • Contact messages: until you ask us to delete them or you delete your account.
  • Backups: routine backups are overwritten on a rolling schedule, so deleted information can remain in a backup for a short time before it is overwritten.

7. Your choices and rights

These apply to everyone, wherever you live, and match what California (CCPA/CPRA) and EU/UK (GDPR) law give you.

  • See and download your data: Dashboard → Login info → Your data → Download my data. You get a file with your account, card, releases, sharing list, wallet and activity totals.
  • Correct it: edit your card any time from your dashboard.
  • Delete it: Dashboard → Login info → Your data → Delete my account. It removes your card, photo, releases, sharing list, wallet and activity counts straight away, and it also removes you from the Creative Card Database.
  • Control who sees what: use the privacy switches on your dashboard.
  • Ask us anything or complain: email info@thecreativecard.us or contact us; we answer within 30 days. If you are in the EU or UK you can also complain to your local data protection authority.

We do not discriminate against you for using these rights. Where the law asks for a legal basis (EU/UK), we process your information to provide the service you signed up for, to keep it secure (our legitimate interest), and with your consent where you give it. Our servers are in the United States, so your information is processed there.

8. Keeping it safe

The site uses encrypted connections (HTTPS), passwords are hashed, forms are protected against forgery, and access to the back office is restricted to admin accounts, with an optional second sign-in step. No system is perfectly secure, but we take these steps seriously and tell affected people if something goes wrong.

9. Children

The Creative Card is not meant for children under 13, and we do not knowingly collect their information. If you think a child has an account, tell us (or email info@thecreativecard.us) and we will delete it.

10. Changes

If we change this policy in a way that matters, we will say so here and, for significant changes, ask you to agree again.