Legal
Privacy Policy
Last updated: 2 November 2026.
TrustyTouch stores only what your card needs: your account name and email, your published card details, messages visitors send to your card, and view/save counts. Your password is stored only as a bcrypt hash — never in plain text.
Public card pages show only the details you choose to publish. Messages sent to your card are visible only to you when logged in. Contact-form submissions are stored for replying to you.
We do not sell your data, we do not show partner logos or invented statistics, and we do not claim integrations that are not live. Cookies are used only for login (a single httpOnly session cookie). App and install analytics are first-party only and aggregate only: we count page views, app opens, install prompts and installs, plus growth events (signups, card saves, messages, upgrade requests, contacts and newsletter signups), split by installed-app versus browser and by mobile versus desktop. No IP address, user id, fingerprint or third-party tracker is used, and analytics events are deleted after 90 days. You can see the same aggregates in the admin dashboard. Card analytics: when someone views your card, saves it, or clicks a link, call, WhatsApp, email or copy button on it, we count that interaction so you can see it in charts on your dashboard. Only you can see your own card's analytics. We store no visitor name, IP address, or identity with these counts — only the kind of interaction, the link label for link clicks, a coarse device (mobile or desktop), and the time. Interaction history is kept so your charts keep their full history; deleting your account deletes it with everything else. You can delete your account and its card and messages from Dashboard → Settings.
Questions: use the contact form.