Privacy notice

Who operates Wisecards

Wisecards is a BakerWilcox product operated by BAKER WILCOX LTD, company number 05616886. Our registered office is 109 St. James Park, Tunbridge Wells, Kent, TN1 2LQ, United Kingdom. For data questions, email [email protected].

Information you provide

We use your account email to verify access, send sign-in codes and activation links, and help manage your account. We store the card details, text modules and images you choose to add, along with account and card identifiers and records needed to operate the service.

When creating a card for someone else, make sure you have permission to publish their information. You choose what is included on the card.

Public cards and private drafts

Your draft is private before activation. Publishing makes the selected card details and images available to anyone with the link. Published cards may be shared or indexed by search engines. Your account email is not automatically added to a public card.

Activation links expire after 24 hours and sign-in codes after five minutes. The activation email may contain a preview of your saved draft. Treat that email and its link as private.

Views and necessary cookies

The beta counts public card visits reported by your browser by UTC day. Repeat visits count again; known bots, prefetches, downloads and signed-in owner previews are excluded. These counts are not unique visitor or QR scan measurements. Visits may not be counted when JavaScript or analytics requests are blocked.

Card analytics include historical views and show device, operating system, browser and country breakdowns where available. We derive these categories from request information without storing raw visitor IP addresses or user-agent strings for new events. We do not create an analytics visitor cookie. Older event records remain stored and are included in the charts. Hosting providers may keep technical request logs.

We use a signed, necessary session cookie to keep you signed in and recover a saved draft. Sign-in sessions last up to 30 days, with renewal while you use the service; draft recovery lasts up to 24 hours. Signing out clears the session.

Service providers

Google Firebase provides hosting, database and image storage. Mailgun delivers our transactional emails. Optional photo, GIF and address-search features use their configured providers, which may receive information needed to fulfil those requests. Opening external links on a card takes you to services with their own privacy practices.

Provider processing and technical logs may involve locations outside the United Kingdom. We do not claim that every copy of your data stays in one country.

Keeping and deleting information

We keep account and published card data while the account is active. Expired drafts and authentication records are subject to routine cleanup. Link expiry prevents activation; it does not erase copies of an email already delivered to you.

Deleting a card removes its public card access. Non-identifying daily totals may remain until account deletion. Account deletion includes its card and analytics records. Backups and provider logs can remain subject to their retention schedules; we will explain relevant limits when handling a request.

Requests and questions

Depending on the circumstances, you have rights to access, correct, erase, restrict or object to the use of your personal information, and to receive a portable copy. Contact us to discuss a request.

Contact [email protected] to request access, correction or deletion of your information, or to raise a concern. We verify your identity and account ownership before sharing or changing account data. Do not send passwords, sign-in codes or activation links.

You can also raise a concern with the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

See Contact for company details and support, or read our terms of use.