Privacy Policy

Last updated: May 2026

This Privacy Policy describes how TAP ("The Amelia Party," "we," "us," or "our") collects, uses, and protects information when you use our website and services. TAP is operated from the United States. By using TAP, you acknowledge that your information will be processed in the United States.

1. Data We Collect

When you use TAP, we collect:

• Your email address (provided through Gumroad at checkout)
• Your name (as entered in the card builder)
• Your character and background selections
• Basic technical data such as IP address and browser type, processed by Cloudflare for security and site performance
• Aggregate, anonymized usage analytics (no personal identifiers)

We do not request or store payment card details, billing addresses, or any other identifying information beyond what is listed above. Payment details are handled exclusively by Gumroad.

2. How We Use Your Data

We use your email address and name solely to:

• Generate your personalized PDF card
• Deliver the PDF to you via email
• Provide customer support if needed

We do not sell, rent, or share your data for marketing purposes, and we do not use your data for advertising.

3. Legal Basis for Processing

Where applicable law requires us to identify a legal basis for processing your data, we rely on:

• Performance of a contract — to generate and deliver the digital product you have purchased.
• Legitimate interests — to operate, secure, and improve our website (for example, through Cloudflare's security and performance services).
• Consent — where you have explicitly opted in, such as agreeing to non-essential cookies if and when offered.

4. Cookies and Analytics

TAP uses Cloudflare for hosting, security, and basic site performance. Cloudflare may set essential cookies necessary for the site to function. We do not currently use third-party advertising cookies or behavioral tracking.

If we add analytics or other non-essential cookies in the future, we will update this policy and, where required by law, request your consent before any non-essential cookies are set.

5. Third-Party Services

We rely on the following third-party services, each with its own privacy practices:

• Gumroad — Processes payments and acts as the seller of record. See Gumroad's privacy policy.
• Resend — Sends your PDF via email. See Resend's privacy policy.
• Cloudflare — Hosts the website and Workers. See Cloudflare's privacy policy.

Each of these providers may process data in the United States or other jurisdictions. Their respective policies describe the safeguards they apply to international transfers.

6. Data Retention

We retain your email address and name only as long as necessary to deliver your PDF and respond to any related support requests, and in any case no longer than 90 days after delivery. After that period, we delete this information from our systems.

Sales records held by Gumroad (including transaction IDs and timestamps) are retained according to Gumroad's own policies and applicable tax and accounting law. We may keep aggregated, anonymized usage data indefinitely for analytics purposes.

7. Data Security

Your data is transmitted over HTTPS and processed by reputable, industry-standard third-party services. We take reasonable steps to protect your information, but no system is completely secure. To the extent permitted by law, we are not liable for unauthorized access or data breaches beyond our reasonable control.

8. International Users and Your Rights

TAP is operated from the United States and is intended primarily for US-based customers. However, we recognize that customers from other jurisdictions, including the European Economic Area (EEA), the United Kingdom, and elsewhere, may use our service.

Regardless of your location, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw any consent you have previously given

If you are located in the EEA or the UK, you also have the right to:

• Restrict or object to certain processing of your data
• Request data portability
• Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk)

To exercise any of these rights, contact us at TheAmeliaParty@proton.me. We will respond within a reasonable time and in accordance with applicable law.

9. Children's Privacy

TAP is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Policy Changes

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of TAP after a change constitutes acceptance of the updated policy.

11. Contact

For privacy questions or to exercise your rights, contact us at TheAmeliaParty@proton.me.