Legal Privacy Policy

Privacy Policy

What data we collect, why, and the control you have over it. No third-party ad trackers.

Last updated: June 5, 2026

01Data controller

pres.cards, operating from Mexico City, is responsible for processing the data described here. Contact: [email protected].

02What data we collect

We only collect what is necessary to provide the Service:

  • Account data: your email and an encrypted (bcrypt hash) version of your password. We never store it in plain text.
  • Press kit content: name, bio, photos, links, releases and any material you upload.
  • Bookings: name, email, message and request details, plus IP and user-agent for abuse prevention.
  • Visit metrics: pseudonymized — the IP is stored hashed, with approximate country, device type and referrer. No third-party tracking cookies.
  • Optional integrations: if enabled, we may process your email via IMAP/SMTP, your Telegram chat, or metrics from external platforms (Spotify, YouTube, Instagram, TikTok, SoundCloud) using credentials you provide.
  • Technical data: server logs for security and diagnostics.

03How we use the data

We use your data to operate and display your press kit and dashboard; process payments and manage your subscription; send transactional emails (verification, receipts, security alerts, bookings); prevent fraud and abuse; and improve the product in aggregate.

We do not sell your data. We do not use it for third-party advertising.

04Legal basis

We process your data based on: performance of the contract, your consent (optional integrations), our legitimate interest (security and improvement) and legal compliance.

05Providers and third parties

We share data only with providers that help us operate, under confidentiality:

  • PayPal — payments. We do not store card data; PayPal handles it.
  • Hosting provider — where the servers reside.
  • Telegram — only if you connect the bot.
  • Metrics platforms — only if you enable those integrations.

We do not share data with ad networks or data brokers.

06Cookies

We use a minimum of essential and preference cookies:

  • pcsid / session — keeps you logged in.
  • pc-theme — light/dark theme.
  • pres_lang — your language.
  • pres_kit — which kit you are editing (multi-kit).
  • pc_attrib — the source of your first visit (campaigns), only if you arrive with UTM/gclid/fbclid parameters.

Analytics and advertising cookies (Google Analytics, Google Ads, Meta) are only enabled with your explicit consent, managed by the banner at the bottom. Until you accept, they are not stored.

07Analytics & advertising

With your consent we use Google Analytics 4 and Google Ads to understand site usage and measure our campaigns. IP is anonymized. We implement Google Consent Mode v2: without your acceptance, these tools store no advertising cookies.

For reliable conversion measurement we use server-side tracking (Google Analytics Measurement Protocol and Meta Conversions API). Personal identifiers (such as email) are always transmitted hashed with SHA-256, never in clear text.

We keep an internal, anonymized log of conversion events (signup, payment) for our own analytics, associated with campaign parameters (UTM), not personal data.

08Data retention

We keep your data while your account is active. If you delete it, we erase or anonymize your data within a reasonable period, except what we must keep for legal obligations. Backups rotate and expire on their own.

09Your rights

You have the right to access, rectify, erase, export (portability), object to and restrict the processing of your data.

How to exercise them

You can edit or delete most of your data from your dashboard. For a formal access, export or full-deletion request, write to [email protected].

10Security

We apply reasonable measures: bcrypt-hashed passwords, encrypted connections (HTTPS), anti-brute-force protection, server-authoritative validation and backups. No system is 100% infallible, but we work to protect your information.

11International transfers

Our providers may process data on servers outside your country. When this happens, we seek adequate safeguards under applicable law.

12Minors

The Service is not directed at minors under 18 and we do not knowingly collect their data. If you believe a minor gave us data, contact us to remove it.

13Changes to this policy

We may update this policy. If changes are material, we will notify you by email or within the Service. The "last updated" date shows the current version.

14Contact

For privacy queries or to exercise your rights: [email protected]. See also our Terms of Service.