Legal
Privacy Policy
Last updated: July 29, 2026
Who we are
Card Blueprints is operated by Cassidy Rice (Cassidy Rice Company). We offer personal Cardology readings and free birth card tools at cardblueprints.com. Questions about this policy can be sent to therealcassrice@gmail.com.
What we collect and why
Voice reading purchase information
When you purchase a reading, checkout collects your name, email address, and phone number, along with the payment time, amount, and checkout session. The phone number is used to recognize your paid access when you call the reading line. This access profile is kept for up to 90 days. Purchase information is not used for marketing, not shared with third parties for advertising, and not sold.
What happens during an AI call
The AI voice service must process what you say so it can answer. Card Blueprints uses xAI-based tools for the voice guide. Our website and payment worker do not store call audio or transcripts, but the provider may process or retain call data under its account settings and privacy terms. Provider-side recording, transcript retention, and model-training settings are still being confirmed. Until that check is complete, do not share medical, legal, financial, account, or other sensitive information during a call.
Payment information
Payments are processed by Stripe. We do not store your card number, CVV, or full payment details. Stripe's own privacy policy governs how they handle your payment data. From checkout we may receive your name, email address, phone number, amount paid, and checkout session reference.
Free tools
The birth card calculator, compatibility calculator, and period tools run entirely in your browser. No birth date you enter into these tools is transmitted to our servers or stored.
Privacy-conscious site analytics
We use Cloudflare Web Analytics for page traffic and performance, plus a first-party conversion event stream to understand whether visitors use the calculator, click the free reading line, compare offers, begin checkout, or complete a purchase. The event stream uses a random identifier created for and reused only within the current browser tab. It does not store analytics cookies, birthdays, calculated cards, names, email addresses, phone numbers, full referrer URLs, IP addresses, or user-agent strings. Cloudflare retains these custom events for up to three months. If you begin checkout, the same random identifier and non-personal source labels may be attached to the Stripe Checkout Session solely to connect a completed purchase to the earlier funnel. Stripe may retain that checkout metadata under its own transaction-retention rules and privacy policy.
On-site reading pages
The on-site reading, story, and deep-dive pages are different: they send the birth date to our server so the text can be generated for it. That request is processed to build your response and is not saved to a database — we operate no birth date store. Standard Cloudflare request logs still apply, as described below.
Server logs
Our hosting infrastructure (Cloudflare) may log standard technical data such as IP addresses and request metadata for security and performance purposes. These logs are governed by Cloudflare's privacy policy.
How we use your information
- To recognize your paid voice access when you call from your checkout number.
- To send your purchase confirmation and start-here instructions by email.
- To connect return calls with the correct paid access during your access window.
- To follow up on questions or support requests about a purchase, if you ask.
We do not use your information to send unsolicited marketing emails, build advertising profiles, or share data with data brokers.
Third-party services
We use the following services whose privacy policies apply to data they process on our behalf:
- Stripe — payment processing. Stripe Privacy Policy
- Resend — transactional email delivery. Resend Privacy Policy
- xAI — AI processing for the voice reading guide. xAI Privacy Policy
- Cloudflare — hosting and edge infrastructure. Cloudflare Privacy Policy
Cookies
Card Blueprints does not use advertising cookies and does not track you across other sites. Cloudflare may set security-related cookies (such as __cf_bm) as part of bot protection.
How long verified records are kept
- Voice access profiles: for the access window you purchased, up to 90 days.
- Order records: up to 400 days for support and accounting.
- Tab-scoped conversion analytics: up to three months.
- Stripe checkout attribution metadata: under Stripe’s transaction-retention rules.
Your rights
You can request that we delete the information tied to your purchase at any time by emailing therealcassrice@gmail.com with the email address or phone number you used at checkout. We will confirm deletion within a reasonable time, except for records we must keep for legal, tax, fraud, or payment-dispute reasons.
Changes to this policy
If we make material changes to this policy, we will update the date at the top. Continued use of the site after a change constitutes acceptance.
Contact
Privacy questions: therealcassrice@gmail.com