Privacy notice

Who this describes

Dtails is a digital business card application. This notice describes what the software stores and why. It is written to be accurate about the implementation, not to make legal claims: it is not legal advice, and it does not assert compliance with GDPR, CCPA or any other regime. If you run Dtails for others, have it reviewed by someone qualified before relying on it.

If you have an account

We store your email address and password hash through Supabase Auth, and a profile row with your name and optional job title and company.

Each card you create stores what you typed into it, the images you uploaded, your chosen theme, and which fields you chose to show or hide.

Only the fields you publish are visible to anyone else. Hidden fields are filtered out by the database, not merely left out of the page.

If someone sends you their details

The form on a published card stores the name, email and any optional phone, company, job title and message the visitor entered, along with the time they ticked the consent box.

That data belongs to the card owner. No other account can read it, and no anonymous visitor can read it; this is enforced by database row-level security rather than by the interface.

As the card owner you can edit, export and delete each lead at any time.

Analytics

We record that something happened — a card was opened, a link was clicked, a contact file was downloaded, a form was submitted — along with the time, the card, and in some cases which link.

We do not store IP addresses, user agents, device identifiers or full referrer URLs. Where a referrer is recorded it is reduced to a host name.

A random identifier is kept in your browser session so repeated views within half an hour are not counted twice. It is not linked to any person and is discarded when the browser session ends. Visitor counts are therefore approximate.

What we never do

We do not sell data, and there is no advertising network involved.

We do not email anyone who filled in a lead form. Their details go to the card owner and nowhere else.

We set no tracking cookies. The only cookies are the ones that keep you signed in.

How long things are kept

Cards, leads, contacts and analytics are kept while your account exists.

Deleting a card deletes the leads and analytics collected through it.

Deleting your account deletes everything: profile, cards, leads, contacts, analytics and uploaded images. It cannot be undone.

Exports are generated on request and are never stored by us.

Your choices

Hide any field you do not want published, at any time.

Unpublish a card to take it offline while keeping your data.

Export your leads as CSV whenever you like.

Delete individual leads and contacts, or your whole account, from Settings.