What we store, and what we deliberately don’t

CardLore is about experiences, not financial surveillance. The shortest honest summary is that it stores what you write, the few things you choose to say about yourself, and almost nothing else.

The data fiduciary responsible for your data is Soham Mayekar.

Card numbers. CVVs. Expiry dates. Account numbers. Customer IDs. Net-banking or app credentials. OTPs from your bank. Income documents. Statements. KYC papers. Your credit report. There is no field anywhere for any of them, and anything that looks like one is refused where it is typed.

• Your sign-in. Your email address, and if you use Google, the identifier it gives us, to know it is you. The name and photo Google holds are not kept on your profile and never shown. If you sign in with a code, we send it to your email through our email provider.
• What you choose to show. Your display name, handle, and anything you add to your profile, so your posts are signed.
• Your situation, if you set it. An age range, roughly what you do, roughly how long you’ve had credit and roughly where you live, as ranges rather than numbers, to find people who started somewhere similar. It is also kept in a cookie on your device.
• Your wallet, if you fill it in. Which cards you hold, never a number, a limit or a balance.
• What you write and do here. Posts, replies, responses, likes, saves, follows, reports you make and your notification settings, because that is the service.
• To keep the community safe. Moderation decisions, with a copy of what was removed; and counters of how often an account or a (scrambled, unreadable) network address did something, to slow down spam.
• Your agreement. When you agreed to the terms and this notice, and to which version.
• Visits, counted without cookies. If analytics are switched on for this site, page views and a few actions (a post published, a reply posted, a card page viewed, a share) are counted in aggregate, with no cookie, no personal data and nothing that follows you to other sites.

Everything you publish is public and signed with your display name and handle. Your email, your sign-in provider, your saves and your notifications are private to you. Moderators see reports and what they are about. We do not sell your data or share it for advertising. It is stored with our hosting provider, and your sign-in provider knows that you signed in here.

• Your account and everything in it: until you delete them. Deleting your account removes your profile, posts, replies, responses, wallet, follows, saves and notifications at once.
• A draft or a post you delete: removed when you delete it.
• Rate-limit counters: a day at most.
• The moderation record of removed content: for as long as a decision might need to be reviewed or explained.

• See it. Download everything you wrote and set here from Settings.
• Correct it. Edit your profile, situation, wallet and posts at any time.
• Erase it. Delete a post, or your whole account, from Settings. That also withdraws your consent.
• Nominate someone to exercise these rights if you cannot, by writing to the grievance officer.
• Complain. To our grievance officer, Soham Mayekar, at Details will be published before launch (how complaints are handled), and, if you are not satisfied, to the Data Protection Board of India.

Every post, reply and response shows the display name and handle you chose when you joined. There is no anonymous posting: CardLore offered it until September 2026, and every earlier anonymous post now shows its author.

CardLore is for people aged 18 and over.

If this notice changes in a way that matters, we will ask you to agree again before your next post.