CardKit
Small tools for website editing and template work

LEGAL

Privacy Policy

Last updated: October 2026

CardKit respects user privacy and aims to minimise unnecessary collection of personal information.

This Privacy Policy explains how information may be processed when you visit CardKit, use its browser tools, contact us or interact with third-party services that may be used on the website.

For privacy questions, contact support@xdstudiolab.com.

1. Browser-based tool processing

Some CardKit tools are designed to process content directly inside the user's browser.

For example, HTML pasted into the CSS Code Editor is processed locally in the browser and is not intentionally transmitted to CardKit servers for processing or storage.

Similarly, image tools should process user-selected image files locally whenever technically practical.

Users should not assume that content referenced by their code remains entirely offline. HTML or other content may reference external resources such as:

  • Images
  • Fonts
  • Scripts
  • Stylesheets
  • Content delivery networks
  • Third-party libraries

When a browser requests those external resources, the relevant third-party provider may receive information normally associated with a web request.

2. Information provided voluntarily

CardKit may receive information that users choose to provide directly. Examples include:

  • Email address
  • Name
  • Support messages
  • Bug reports
  • Feature requests
  • Privacy requests

This information is used only for purposes reasonably related to the request.

3. Server and security information

Like most websites, the hosting infrastructure used by CardKit may automatically process technical information required to deliver and protect the website. This may include:

  • IP address
  • Browser type
  • Device information
  • Request time
  • Requested URL
  • Security and diagnostic information

Retention and processing may also depend on the hosting and infrastructure providers used by the website.

4. Analytics

CardKit may use privacy-conscious analytics or third-party analytics services to understand general website usage. If analytics services are enabled, they may process information such as:

  • Page visits
  • Referring pages
  • Browser type
  • Device type
  • Approximate geographic information
  • Interaction data

This Privacy Policy will be updated if the analytics configuration changes materially.

5. Advertising

CardKit may display third-party advertising, including advertising provided by Google.

Third-party advertising providers may use cookies, web beacons, IP addresses or other identifiers in connection with ad delivery, measurement, fraud prevention and personalisation where permitted.

Google and other advertising partners may use information associated with visits to CardKit and other websites to provide, measure or personalise advertising in accordance with their own policies and applicable user choices. Users can manage personalised advertising through Google's advertising settings where available.

CardKit may use a consent-management platform where required by applicable law or advertising-platform policy.

6. Cookies and similar technologies

CardKit itself aims to minimise unnecessary cookies. However, cookies or similar technologies may be used by:

  • Advertising providers
  • Analytics providers
  • Security providers
  • Hosting providers
  • Consent-management systems

Users can control cookies through their browser settings and, where available, through consent controls presented on the website. Blocking some technologies may affect certain website functionality.

7. European Economic Area, United Kingdom and Switzerland

Where required, CardKit may display a consent message to visitors in the European Economic Area, United Kingdom and Switzerland before certain advertising or data-processing technologies are used.

Consent controls may be provided through a Google-certified consent-management platform or another compliant solution.

8. Third-party services

CardKit may rely on third-party services for hosting, advertising, analytics, security, content delivery or website functionality. These providers operate under their own privacy policies.

CardKit cannot control data independently submitted by a user's browser to an external resource that the user has referenced in pasted code or content.

9. External links

CardKit may link to third-party websites. CardKit is not responsible for the privacy practices or content of third-party websites.

10. Data retention

Information voluntarily submitted through support communication may be retained for as long as reasonably necessary to:

  • Respond to the request
  • Maintain support history
  • Protect the service
  • Meet legal obligations

CardKit does not intentionally maintain a server-side archive of HTML pasted into tools that are described as local browser-processing tools.

11. Children's privacy

CardKit is a general-purpose website productivity service and is not specifically directed to children. Users should not knowingly submit personal information about children through support or feedback channels.

12. Security

Reasonable technical measures are used to protect the website and information processed through it. However, no internet service can guarantee absolute security.

Users should not paste the following into CardKit tools: passwords, API keys, private credentials, financial information, confidential client data or sensitive personal information.

13. Changes to this Privacy Policy

This Privacy Policy may be updated when CardKit adds new tools, advertising, analytics or other functionality. The date at the top of the page will be updated when material changes are published.

14. Contact

Questions about this Privacy Policy can be sent to support@xdstudiolab.com.