Your memories are yours.

CueCard (“CueCard”, “we”, “us”, “our”) is a digital keepsake service operated by an independent individual based in Italy. This Privacy Policy explains how we handle personal data when you use cuecard.live (the “Service”). For the purposes of the EU General Data Protection Regulation (GDPR), we act as the data controller for the limited data described below.

This policy forms part of, and should be read together with, our Terms of Service. You can reach us about anything in this policy at hello@cuecard.live.

CueCard has no user accounts and no login. We deliberately collect as little as possible: essentially, what we need to take a payment, deliver what you bought, and keep the Service running and secure.

The memories you write, your track choices, and your photo are used to create your cards in the moment — they are not kept by us afterwards, with the narrow exceptions described below. The one time we hold on to content you create is if you choose to publish a card to our public library.

When you generate your cards, the era name, track details, and the memories you write are sent to our systems and passed to a trusted third-party AI provider that writes your liner notes. We do not retain this text after your cards are generated.

To enforce the generation limits attached to your purchase, we keep a one-way cryptographic fingerprint (a “hash”) of your inputs alongside your payment record. A hash cannot be reversed back into your original words.

Your cover photo is handled inside your browser to build your cards. It is not uploaded to our servers or shared with third parties — unless you choose to publish that card to our public library (see section 5).

Payments are processed by Stripe, our payment provider. Your card number and full billing details are handled directly by Stripe and are never seen or stored by us.

To honour your purchase, run our accounts, and prevent fraud, we do keep a payment reference, which pack you bought, and how many generations you have used. Your browser also stores a small “unlock” token locally so that a refresh or a closed tab does not lose the purchase you paid for. That token contains no financial details and you can remove it by clearing your browser’s site data.

If — and only if — you choose to submit a finished card to our public library, we store the card image you submit together with its era title so it can be shown to others. You can ask us to remove your published card at any time by emailing hello@cuecard.live.

If you redeem a promotional code, we store an anonymous redemption record (a random identifier, the pack granted, and usage) so that limited offers can be enforced.

If you choose to leave a review, we store your star rating, any optional comment, and the time it was left. We do not attach your identity to it — though a comment will contain whatever you type into it. Reviews may be shown publicly on the Service or used in our marketing.

When you search for a song, your search term is sent through our systems to third-party music catalogue services purely to return matching results. No account of yours is involved and no listening history is accessed.

We use a privacy-friendly, cookie-free analytics tool to understand overall site usage in aggregate. We also keep our own anonymous, aggregate counts of how the site is used (for example, how many people reached a page) — these are numbers, not profiles of you.

We use the Meta Pixel and the TikTok Pixel to measure our advertising and build advertising audiences. These may set cookies or use similar identifiers and share standard event data (such as pages viewed, checkout started, and purchases completed, including order value) with Meta and TikTok, who process it under their own privacy policies.

You can limit this through your browser settings, tracking-protection or ad-blocking tools, and the ad-preference controls in your Meta and TikTok accounts.

A gift link contains only a payment reference and its unlock token. Anyone holding the link can use the capsule it unlocks, so treat it like a gift card and share it only with the person you intend to.

Where the GDPR applies, we rely on: performance of a contract (to take your payment and deliver your capsule); our legitimate interests (to operate, secure, and improve the Service, measure our advertising, and prevent abuse); your consent (where required, for example for certain advertising cookies or when you publish a card or leave a review); and compliance with legal obligations (such as accounting and tax).

Some of the providers we rely on — including payment processing, AI text generation, advertising measurement, and hosting — may process data outside your country, including in the United States. Where they do, they are expected to rely on appropriate safeguards recognised under applicable law.

Payment and transaction records are kept for as long as needed to run our accounts and meet legal, tax, and fraud-prevention obligations. Promo and review records are kept for the life of the relevant promotion and our ongoing use of testimonials. Aggregate analytics contain no personal profile and are kept indefinitely. Published library submissions are kept until you ask us to remove yours or we take it down.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email hello@cuecard.live and we will respond as required by law. Because we hold so little that identifies you, some requests may simply confirm there is nothing to act on.

If you are in the EU, you also have the right to complain to your local data protection authority (in Italy, the Garante per la protezione dei dati personali).

CueCard is intended for adults and is not directed at children under 18. We do not knowingly collect data from children.

We may update this policy as the Service develops. Material changes will be reflected here with a new effective date. For any question or request relating to your data, contact hello@cuecard.live.