Privacy Statement

1. Who we are

bingocards-generator.com is an online tool to generate bingo cards. This statement explains what data we collect and why. We comply with GDPR. Questions? Email info@bingocards-generator.com.

2. What we DON'T do

We have no user accounts. We don't store names, addresses or birthdates. We don't sell data to third parties. We don't track your personal bingo card content (texts, photos) unless you explicitly save it.

3. What data we DO process

• Anonymous analytics via Google Analytics 4 (page visits, clicked buttons, language, anonymized IP). Purpose: understand which themes are popular and where users get stuck.
• When saving a card to play online: a unique code + your card content (texts and/or uploaded images). Optionally your email for an edit link. Retention: 90 days after last activity.
• When paying via Stripe: standard Stripe payment metadata (transaction id, amount, language, session id). We never see credit card details — Stripe handles them directly.
• When linking Spotify: only the OAuth token to control playback. We never see your Spotify password or listening history.
• Server logs (IP + user-agent) are retained for 30 days for security and debugging, then automatically deleted.

4. Cookies

We use only functional cookies (client id to track your usage limit) and analytics cookies (Google Analytics 4 with IP anonymization). No advertising cookies, no tracking pixels, no social widgets.

5. Sub-processors (where your data flows)

• Google Analytics 4 (Google Ireland Ltd.) — anonymous analytics, EU data region.
• Stripe Payments Europe Ltd. — payment processing, PCI-DSS certified.
• Resend Inc. — transactional emails (edit link, payment confirmation). No marketing emails.
• Spotify AB — only if you use Music Bingo Pro+, for Web Playback SDK.
• MongoDB Atlas — database for saved cards. EU-hosted (Frankfurt).

6. Your rights (GDPR)

You have the right to access, rectify, delete, port your data and object. Because we have no accounts and use anonymous client ids, we can only find a specific session if you share your card code with us. Email info@bingocards-generator.com and we respond within 30 days.

7. Retention

Saved cards: 90 days after last visit. Payment records (Stripe): 7 years (legal tax retention). Server logs: 30 days. Analytics: 14 months (GA4 default).

8. Changes

We update this statement when we add new features or sub-processors. The 'last updated' date at the top shows the most recent version. Material changes are announced on the homepage.