Privacy

Last updated 11 October 2026

Metcard is run by Volka Pty Ltd (ABN 90 683 609 412), Western Australia. This page explains what we collect, why, who else handles it, and how to get it changed or deleted. Questions go to hello@metcard.app.

If you make a card

• Your email address, to send your sign-in codes and important account messages.
• What you put on your card: name, photo, roles, businesses, phone, email addresses, links, products and codes. You choose all of it, and anyone you share the card with can see it.
• Photos you upload. Your phone shrinks them before upload, which also removes most hidden photo details such as location.
• Activity on your card: when it was opened, whether it came from a QR code or a link, which buttons were tapped, the device type (for example iPhone) and an approximate city. Each visitor shows as a random tag, never a name.
• Billing, if you upgrade. Payments are handled by Stripe; we never see or store your card number.

If you look at someone's card

• We record that the card was opened and what you tapped, with your device type and approximate city, so the card owner can see how their card is used. We do not record your name or keep your IP address with that activity.
• If you use Swap cards, the name and contact details you type are sent to that card's owner. They become the owner's to keep.
• If you report a card, we keep the report so we can review it.

Cookies

We use a small number of cookies that the service needs to work: one keeps you signed in, one remembers that you were given access to a card, and one remembers who referred you when you sign up. We do not use advertising or third-party tracking cookies.

Keeping the service safe

To stop abuse such as guessing sign-in codes, we keep short-lived counters tied to a one-way scrambled version of your network address. These counters expire on their own.

Who else handles your information

• Cloudflare hosts Metcard and stores its data. Its servers are around the world, including outside Australia.
• Resend sends sign-in and notification emails, from the United States.
• Stripe processes payments, if you upgrade.

We do not sell your information, and we do not share it for advertising.

How long we keep it

• Your account, cards, uploads, activity and leads stay while your account is open.
• When you delete your account, your cards go offline straight away and your data is permanently removed 30 days later. Your handle is held for a while so nobody else can take over links you have already shared.
• Sign-in codes expire after 10 minutes and are cleared regularly.

Your choices

• See and download your data: Settings, then Export.
• Delete your account: Settings, then Delete account.
• Correct anything on your card at any time in the editor.
• For anything else, or to complain about how we handled your information, email hello@metcard.app. If you are not happy with our answer you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Children

Metcard is for people aged 16 and over.

Changes

If we change this policy in a way that matters, we will tell account holders by email before it takes effect.