Privacy Policy

This policy explains how Moorkyz Cards collects, uses, and protects the information you provide when you use this service. We use personal data only for the purposes described here.

What we collect

To operate accounts, claims, and rewards we store:

• your display name and email address;
• a salted password hash (never the password itself);
• the cards you have claimed, when you claimed them, and rewards granted to you;
• for creators: company profiles, card profiles, reward profiles, and issued card records;
• for virtual cards: the recipient email address the sender entered.

Claim codes

Card claim codes are stored only as cryptographic hashes. A code can be claimed exactly once. When you claim a card the issuing company can see that the card was claimed and, if a reward was won, that a reward was issued; it does not receive your password or session data.

Essential cookies

We use strictly necessary cookies to keep you signed in and to complete a claim you started by typing a code manually. They are HttpOnly, contain no personal data beyond an opaque session reference, and cannot be switched off without breaking sign-in. We do not use advertising or tracking cookies.

Security

We protect your data with appropriate technical and organisational measures, including hashed credentials, encrypted transport, server-side authorisation checks, and access limited to the operator of this service.

Links to other websites

Company profiles may link to external websites. Once you leave this service we have no control over those sites and this privacy statement does not apply to them.

Controlling your personal information

We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so. You may request details of the personal information we hold about you, ask for corrections, or request deletion of your account by contacting us.

Contact

Questions about this policy can be sent to [email protected].