Cookie Policy

Draft for legal counsel review - not yet in force.

Last updated: July 2026

This Policy explains how Emelum OÜ (registry code 17234831, Nõmme tn 30, Kärdla linn, Hiiumaa vald, 92412, Estonia), operating the BizKard platform at bizkard.me ("BizKard", "we", "us"), uses cookies and similar technologies, including browser localStorage. It should be read together with our Privacy Policy.

1. Cookies and localStorage

Cookies are small files a website stores on your device. localStorage is a browser storage area that serves a similar purpose. Under EU ePrivacy rules, storing information on, or reading information from, your device requires the same transparency and, for non-essential uses, the same consent, regardless of the technical mechanism. We therefore treat localStorage entries as equivalent to cookies under this Policy.

2. What We Store

a) Strictly necessary: authentication and session. Your login session is maintained by our authentication provider (Supabase Auth) using tokens stored in your browser. Without this storage you cannot stay signed in, so it cannot be switched off while using the platform. Basis: strictly necessary for a service you have requested; no consent required.

b) Preferences. We store small preference keys (for example interface settings, your preferred messaging mode on card pages, and cached card content) so the app works correctly and remembers your choices. Basis: strictly necessary or functional storage for a service you have requested.

c) Card-page analytics identifiers. When you visit a public card page, a persistent visitor identifier (a random UUID stored in localStorage and as a first-party cookie) and campaign (UTM) parameters may be stored in your browser and used to record card view and interaction statistics for the card owner, as described in Privacy Policy Part B Section 9. This storage persists across visits and is treated as analytics storage, not strictly necessary storage. It is non-essential and consent-gated: the identifier and UTM parameters are stored only if you allow it through the consent banner shown on the card page (Section 4).

d) Visitor identification (RB2B). Public card pages load a third-party identification script from RB2B that can match your visit to a business identity (name, work email, company) and provide it to the card owner as a lead (see Privacy Policy Part B Section 9). This is non-essential and consent-gated: all visitors, worldwide, are shown a consent banner, and the script loads only if you allow it; your choice is stored in your browser so it can be honored on later visits.

e) IP geolocation lookup (ipapi.co). To derive your approximate location for card statistics, your IP address may be sent to the third-party geolocation service ipapi.co where our infrastructure does not already provide a country header. The result is cached in your browser for the session.

f) Payment provider cookies at checkout. When you enter a payment flow, our payment processor, Stripe, sets its own cookies for payment processing, session integrity, and fraud prevention. These are governed by Stripe's own cookie and privacy policies.

g) Google Fonts. Pages, including public card pages, load fonts from Google's servers (fonts.googleapis.com and fonts.gstatic.com). This is not browser storage we control, but it discloses your IP address to Google when the fonts load.

3. What We Do Not Use

We run no general-purpose advertising or social media trackers on bizkard.me or on public card pages: no ad pixels, no Google Analytics, no Meta pixel, and no session recording. However, public card pages do use the first-party analytics identifiers described in Section 2(c) and the RB2B visitor identification script described in Section 2(d), and all pages load Google Fonts from Google's servers (Section 2(g)). If our use of trackers changes, we will update this Policy and our consent mechanism before the change takes effect.

4. Consent

• Strictly necessary storage (authentication, session, security, core preferences) is used without consent, as permitted by ePrivacy rules.
• Visitor identification (Section 2(d)) requires consent, which we obtain through the consent banner shown to all visitors on public card pages, worldwide.
• Analytics identifiers (Section 2(c)) are non-essential storage and are set only with your consent, obtained through the same consent banner.

5. Managing Storage

• Clear site data: in your browser settings, clear cookies and site data for bizkard.me. This will also sign you out.
• Block storage: browsers allow you to block cookies and site data per site. Blocking strictly necessary storage will prevent login.
• Payment provider cookies: manage via your browser or see Stripe's policies.
• Consent banner on card pages: you can decline visitor identification via the banner where it is shown; your choice is stored in your browser and can be reset by clearing site data for bizkard.me.

6. Changes to This Policy

We may update this Policy as our use of storage technologies changes. The "Last updated" date shows the current version; material changes will be flagged on the website or in the platform.

7. Contact

Questions about this Policy: privacy@bizkard.me

Emelum OÜ, Nõmme tn 30, Kärdla linn, Hiiumaa vald, 92412, Estonia. Registry code 17234831.