Updated October 17, 2026
Before checkout
Card selections, name, contact and notes are held in browser state. Continuing to checkout saves the draft in session storage on that browser. You can clear it by clearing site data; it is removed from session storage after a paid order is loaded.
Order information
At checkout, the server receives your email and selected card information to fulfill the order. The card and email are encrypted together in Cloudflare D1. A keyed email hash supports order recovery. Stripe receives the checkout email, price, product and an internal order reference; selected allergens and notes are not added to payment metadata.
Delivery and access
Resend receives your email and private access link for delivery. Anyone who has that link can access the card during the 90-day order access period. Access is blocked after expiry or a refund. Expired order payloads are removed by the next checkout cleanup or operator maintenance job; do not assume backups or provider records are removed at the same time.
Analytics and support
Google Analytics is disabled by default unless a measurement ID is configured. The integration is excluded from the generator, checkout, contact and order routes. No card content is sent in custom analytics events. Support submissions use the existing feedback service and may be forwarded to the operator’s Feishu support channel with email, message, IP address and browser information. Cloudflare Turnstile may verify support forms when configured.
Your choices
Avoid putting unnecessary personal information in notes. Contact support@foodallergycard.org to request access, correction or deletion of order data. We may need to confirm order ownership. Payment providers and infrastructure providers maintain their own records under their own policies. The official resources below explain privacy rights within their stated scope. Contact support to discuss a request relating to your order.
Official reference: European Commission — information for individuals