Privacy Policy
Updated: 2026-09-28
This policy explains how Wallet Card Maker handles information.
Photos and local cards
Selected photos and card edits are stored in the app on your device. We do not access your entire photo library. Depending on your device settings, app data may be included in operating-system backups.
Adding a card to Wallet
When you add a card to Wallet, the generated card image, footer text, colors, and card identifier are sent to our signing service on Cloudflare. These are processed temporarily to return a signed pass. Images, card content, and signed passes are not stored in the server database or file storage, or written to application logs. Apple manages passes added to Wallet.
Abuse prevention
When Apple App Attest is used, we store a public key identifier, public key, signature counter, and registration date in Cloudflare D1 to authenticate the app and prevent replay attacks. These records are separate from images and purchases. Authentication challenges expire after 120 seconds and are deleted when consumed or during a subsequent challenge request. Device registration records currently have no automatic deletion schedule. Contact us about deletion; uninstalling the app does not automatically delete these records.
Connection data and operational logs
Cloudflare processes connection information such as IP addresses when you access this website or the signing service. The signing service uses IP addresses and device identifiers to limit requests. Cloudflare operational logs may include request metadata and error categories, with retention governed by the service and its configuration. We do not log request bodies, photos, entered text, or secrets.
Purchases
Apple processes in-app purchases and refunds. The app checks verified StoreKit purchase information to determine premium access. We do not receive payment card numbers or payment passwords. Developer sales reports provided by Apple are used to administer sales.
Advertising, analytics, and providers
The app contains no advertising or third-party behavioral analytics SDKs. This policy website has no analytics scripts or tracking cookies of its own. We use Cloudflare for hosting and signing, and Apple for Wallet, authentication, and purchases. These providers may process information outside your country of residence.
Deletion and requests
You can delete saved cards in the app. Delete Wallet passes and images exported to Photos separately in those apps. Deletion in this app does not remove those copies or operating-system backups. Contact details and messages you provide for support are used and retained as needed to respond. You can contact us about access, correction, or deletion of information.
Changes
We update this page when functionality or data handling changes and communicate significant changes through the app or other appropriate means.
Operator and contact
れとるときゃりー
Contact via DM on X
Related information
Apple Standard EULA · Apple Privacy · Cloudflare Privacy · Apple refunds