Privacy
Last updated 19 October 2026
Orbit Cards makes images (headers, recaps, milestones and other cards) from a read of your X account. This page says what we collect to do that, why, how long we keep it and who else sees it. The short version: we read your X account read-only, keep your last three reads, delete your X sign-in after a read unless you're on Monthly, and never sell anything.
Who we are
Orbit Cards is run by [Legal name of the person or company], [Street, postcode, city, country] ("we"). We decide how your data is used (the data controller). Write to [privacy@orbitcards.app] about anything on this page.
What we collect
When you sign in with X
- Your X profile: your X user id, @handle, name, profile photo address, bio, pinned post, account creation date, and follower, following and post counts.
- Your X sign-in (access and refresh tokens). They let us read your account; they can't post, follow, like or change anything (read-only scopes:
tweet.read,users.read,follows.read,offline.access).
When we read your account (a "read")
- Your posts from the last 30 days and their public numbers (views, likes, replies, reposts), monthly post and reply totals, and a few posts from about a year ago.
- Recent posts that mention you, and up to 200 of your followers.
- Your browser's time zone, so dates on your cards are right.
We don't read direct messages, email addresses, or anything private on X.
Other people in your read
A read includes other X users' public details: the handles, names, profile photos, follower counts and verified badges of people who mention you, people you reply to and some of your followers. Cards about your orbit, shout-outs and thanks show these. We use them only to draw your cards, they stay in your read, and they go when your read is deleted. If you're on someone's card and want off it, write to us.
When you pay
Payments go through Polar (see below), who take your email, payment details and billing country on their own checkout page. We receive and keep the order number, product, amount, currency, status, and Polar's customer and subscription ids. We never see your card.
The cards you make
Cards are drawn in your browser and saved to your device when you download or copy them. We don't upload or keep them, and we don't publish anything for you.
Friend links
If you arrive through a friend's link, your browser remembers their code for 30 days. When you sign in we note who referred you, and when you first pay we give them a free read. To stop the same X account being rewarded twice, we keep a one-way fingerprint (a salted hash) of your X user id.
Technical data
Our server's request logs record IP addresses, browser type and the address asked for, for a few days, to keep the service running and secure. The SnagFrog widget reports errors from the page (the error, the page address and browser details) so we can fix them, and carries the feedback form when you use it. With your consent, Google Analytics counts page views (see Cookies).
Why, and on what legal basis
| What we do | Legal basis (GDPR) |
|---|---|
| Reading your X account and keeping your reads so you can make cards | Contract: it's the service you asked for |
| Payments, receipts and keeping order records | Contract, and legal obligation (tax and accounting records) |
| Showing other people's public X details on your cards | Legitimate interest: making the cards you ask for, limited to public details and kept only in your read |
| Friend rewards and the fingerprint that stops repeats | Legitimate interest: running the referral offer fairly |
| Server logs and error reports | Legitimate interest: security and fixing problems |
| Google Analytics | Consent, which you can withdraw at any time |
We don't sell your data, use it for ads, or use it to train AI. Cards are drawn in your browser and never uploaded.
How long we keep it
- Reads: your three newest. An older one is deleted when a new one is made. Read status records go after 30 days.
- Your X sign-in: deleted straight after each read. On Monthly we keep it so we can make your read on the 1st, and delete it when Monthly ends or you disconnect X. A sign-in with a paid read still waiting is kept up to 30 days, so you can start that read when you're ready; other unused sign-ins are swept daily.
- Your account: until you delete it.
- Order records: as long as tax and accounting law requires, unlinked from you if you delete your account.
- The referral fingerprint: kept after you delete your account, so the offer can't be claimed again by the same X account. It can't be turned back into your X id.
"Delete my data" in your account removes your account, reads and X sign-in at once.
Who else handles your data
| Who | What for | Where |
|---|---|---|
| Fly.io | Runs our server and database | Frankfurt, Germany |
| Netlify | Serves the website | Global network (US company) |
| X Corp. | Sign-in and the data a read gets from your account | US |
| Polar | Checkout, receipts, subscriptions, refunds; seller of record for tax | [Check Polar's privacy policy] |
| SnagFrog | Error reports and the feedback form | [Where SnagFrog stores data] |
| Google (Analytics) | Page view counts, only with your consent | US |
Where data goes outside the EEA or UK, it goes under the European Commission's adequacy decisions (including the EU-US Data Privacy Framework) or standard contractual clauses.
Your rights
You can ask us for a copy of your data, to correct it, delete it, restrict or object to how we use it, or get it in a portable form. Many of these you can do yourself in your account: disconnect X, or delete everything. For anything else, write to [privacy@orbitcards.app]; we answer within a month. You can also complain to your data protection authority.
You can also take back Orbit Cards' access from X's side, at any time, in X's settings under connected apps.
Children
Orbit Cards is not for anyone under 16. We don't knowingly hold data about children; if you think we do, tell us and we'll delete it.
Changes
If this policy changes, we'll update the date at the top, and tell signed-in users in the app when the change matters. Questions or problems: [privacy@orbitcards.app], or report a problem.