Privacy

Updated: 2026-09-23

Card-a-mon is a card game editor looked after by one person — Dalius Dobravolskas, trading as ffff.lt. This is what is collected, where it is kept and what is done with it.

What is collected

• Your email address. It is the account: you sign in with a link sent to it, so there is no password to store.
• What you make. Your projects: their names, the card set documents — card sizes, fields, text, colours and layout — and every image you upload as artwork.
• Work brought across from your browser. Projects made before there were accounts live in the browser that made them. The first visit to your projects offers to bring them here; they are copied only if you accept, and nothing is removed from the browser.
• Feedback you send, if you send it. The projects page has a form asking how you use Card-a-mon. What you write in it is emailed to Dalius, with your address as the reply address so that an answer can be written back. Beside it is an unticked box offering to say what you are working on this with — the size of your screen and window, and the browser and operating system your browser reports. That is sent only if you tick it, and nothing is remembered on the server either way: the email is the whole of it.
• AI assistants you connect, if you connect one. You can let an AI assistant such as Claude work on your projects over MCP (what that is). For each one you approve, the server keeps the name the assistant gave itself, the address it asked to be sent back to after you approve it, when you approved it and when it was last used, and digests of the tokens it signs in with — never the tokens themselves. Assistants that register but are never approved are forgotten within a day.
• Images an assistant fetches from a link. When an assistant asks for an image to be added from a web address, the server downloads it and keeps it with your project like any image you uploaded. Nothing else about the request is kept.

That is the whole of it. There is no profile, no name, no address and no payment details, because there is nothing here to pay for.

Where it is kept

Each account's projects and artwork sit in a SQLite file of their own — not in a shared table with other people's rows. The server is rented from Hetzner Online GmbH and stands in Germany, in the European Union, and the data does not travel out of it. The connection from the browser is HTTPS.

Cookies

One cookie — cardamon_session — holds your sign-in session and lasts 30 days. It is HttpOnly, sent only over HTTPS, and without it there is no way to be signed in. There are no analytics, advertising or third-party tracking cookies, because there is no analytics, advertising or tracking here at all.

The editor keeps nothing of its own in the browser's storage. What a browser is still holding is the work it made before accounts existed, in IndexedDB, put there by an older version of Card-a-mon.

Sign-in links and your IP address

A sign-in link is good for fifteen minutes and works once. What the database holds is not the link but its cryptographic digest. Your address is capped at five links an hour, and a client address at ten; the IP address that counts is held in the server's memory only and is never written to the database.

The server log records what was done, not who did it: an email address appears there as the first bytes of its SHA-256, never as the address. Those logs are rotated and the old ones discarded.

Third parties

The server's landlord, Hetzner Online GmbH, whose machine runs the application, the database files and the mail server. The sign-in emails come from that same machine rather than through somebody else's sending service.

Google Fonts. The typefaces the pages are set in are fetched by your browser from fonts.googleapis.com and fonts.gstatic.com, which means Google sees the request: your IP address and which browser you use. Nothing about your account or your projects goes with it — the fetch happens whether or not you are signed in.

The AI assistant you connect, if you connect one. This is the one case where your work leaves the server, and it happens only at your request: once you approve an assistant, whatever it reads from your projects — names, card text, layout, images — goes to the company that runs that assistant (for Claude, Anthropic), and what it does with it is governed by that company's terms and privacy policy, not these. That company may be outside the European Union. Card-a-mon sends an assistant nothing it does not ask for, and nothing from anybody else's account. You can disconnect it at any time on the account page.

Websites an assistant fetches images from. The download is made by the server, so the site hosting the image sees the server's address, not yours, and nothing about your account is sent with it.

There is nothing else: no analytics, no advertising, no tracking services, no backups in somebody else's cloud. Your work is not sold, not passed to advertisers, and not given to anybody to train models on by Card-a-mon. What an assistant you connect does with what it reads is up to its provider's terms, which is worth reading before you connect one.

Deletion

You can delete the account yourself on the account page. The database file holding your projects and their artwork is deleted with it, along with your sessions, any unused sign-in links, and every connected AI assistant and its tokens. An assistant can also be disconnected on its own, on the same page. There is no way to bring it back. More about your rights on the GDPR page.