Privacy Policy
1. Who is responsible
WJD Designs, Granger, Indiana, United States, operates ultracard.io and is the data controller for the personal data described here. Contact: wayne@wjddesigns.com.
2. What we collect and why
| Data | Where it comes from | Why we use it |
|---|---|---|
| Account details | Email address, username, display name and password hash you provide when you register or check out | To create and secure your account, send account emails, and show you as the author of anything you share |
| Billing details | Name, billing address and order history from WooCommerce; payment tokens from Stripe or PayPal | To take payment, issue invoices, calculate loyalty credit, and meet tax and accounting rules. We never see or store full card numbers |
| Card configurations | Ultra Card YAML and settings your Home Assistant sends when Pro backups, snapshots or sync run | To store your backups and snapshots and sync them to your other devices. This may include entity names and layout details from your dashboard |
| Integration data | Authentication tokens and a Home Assistant instance identifier from the Ultra Card Pro Cloud integration | To verify your Pro status and link backups to your account |
| Community content | Presets, themes, screenshots, descriptions, ratings and comments you submit | To publish them in the gallery under your name |
| Discord ID | Only if you link Discord from your dashboard | To grant the Pro role and priority-support channel access |
| Technical data | IP address, browser type, pages requested, timestamps, in server and security logs | To keep the site secure, prevent abuse and fix problems. Logs are kept for a limited time |
| Cookies | Set by WordPress and WooCommerce when you log in or add something to the cart | To keep you signed in and remember your cart. We do not use advertising or cross-site tracking cookies |
We do not knowingly collect data from children under 16. If you believe a child has created an account, contact us and we will remove it.
3. What we do not do
- We do not sell, rent or trade personal data.
- We do not analyze, profile or mine your card configurations. They are stored for restore and sync only.
- We do not send marketing email unless you have opted in, and every marketing email includes an unsubscribe link. Account and billing emails (receipts, renewal notices, password resets) are sent regardless because the service needs them.
4. Who we share data with
We use a small number of service providers who process data on our behalf and only for the purposes above:
- Stripe and PayPal for payment processing. Your payment details go to them directly.
- SiteGround, which hosts ultracard.io and stores backups and snapshots.
- Discord, if you link your Discord account.
- GitHub, which hosts the open-source card and some website content. Visiting ultracard.io may load assets from GitHub.
- Email delivery providers used to send account and billing emails.
We may also disclose data if the law requires it, or to protect the rights and safety of Ultra Card members. Content you publish to the community gallery is, by design, visible to other users and to the Ultra Card card itself.
5. Where data is stored
ultracard.io is hosted in the United States. If you use the service from elsewhere, your data is transferred to and processed in the United States. Our providers apply standard safeguards for such transfers.
6. How long we keep data
- Automatic backups are kept on a rolling 30-day window and then deleted.
- Named snapshots are kept until you delete them, or 30 days after your Pro access ends.
- Account and billing records are kept while your account exists, and afterwards only as long as tax and accounting law requires.
- Community content stays published until you remove it or we take it down.
- Server logs are rotated after a short period.
7. Your rights and controls
From your dashboard you can view and delete backups and snapshots, manage community submissions, update billing details and cancel a subscription. Depending on where you live you may also have the right to access, correct, export, restrict or erase your personal data, or to object to how we use it. To exercise any of these, email wayne@wjddesigns.com from your account address. We respond within 30 days. If you are in the EU or UK you can also complain to your local data protection authority.
Deleting your account removes your backups, snapshots and profile. Community content you have published can be removed on request. Billing records are retained where the law requires.
8. Security
Connections to ultracard.io use HTTPS. Passwords are stored as salted hashes. Integration tokens are stored encrypted inside your Home Assistant configuration and refresh automatically. Access to production systems is limited to the people who run the service. No system is perfectly secure; if we learn of a breach affecting your data we will tell you as required by law.
9. Third-party sites
ultracard.io links to GitHub, Discord and other sites we do not control. Their privacy practices are their own. Embedded content (such as videos) behaves as if you visited that site directly.
10. Changes
We will post updates to this policy here and change the date at the top. For material changes we will also notify account holders by email or a notice on the site.
11. Contact
WJD Designs, Granger, Indiana, USA. wayne@wjddesigns.com