Privacy Policy

Summary

To facilitate delivery, postcard data (including photos, messages, and delivery addresses) is securely shared with and processed by our third-party postcard service provider.

Introduction

Bitcoin Postcards (“we” or “us”) values its visitors’ privacy. This privacy policy is effective August 1st, 2025; it summarizes what information we might collect from a visitor (“you”), and what we will and will not do with it.

Please note that this privacy policy does not govern the collection and use of information by companies that Bitcoin Postcards does not control.

What We Collect and How We Use It

It is always up to you whether to disclose your data to us. Bitcoin Postcards primarily collects the following personal data to provide our postcard delivery service:

  • Photos (for the postcard image)
  • Postcard messages (the text content of your postcard)
  • Delivery address (where the postcard will be sent)
  • Bitcoin transaction identifiers (to link payments to orders)

We may also collect other information that cannot be readily used to identify you, such as the domain name and IP address of your computer. We may use this information individually or in the aggregate for technical purposes.

Cookies and Tracking Technologies

We use "cookies" and similar tracking technologies on our website. Cookies are small data files stored on your device that help us provide and improve our service.

  • Essential Cookies: These cookies are strictly necessary for the operation of our website (e.g., to enable secure payments, session management). Without these, the site may not function correctly.
  • Analytics Cookies: We do not use analytics cookies. We may analyze server logs to understand general website traffic patterns, but this data is anonymized or aggregated where possible and not used to identify individual users.

How We Share Your Data with Third Parties

To facilitate the delivery and operation of our service, we engage with specialized third-party service providers.

Postcard Delivery Services:

When you send a postcard, your Photos, Postcard messages, and Delivery address are securely shared with and processed by our primary postcard service provider, Lob.com, Inc. Lob.com, Inc. processes this data solely for the purpose of delivering your postcard to the intended recipient.

Data Retention by Lob.com, Inc.: Our contracts with Lob.com, Inc. stipulate that they are required to destroy or delete your postcard data (photos, messages, and delivery address) from their systems promptly after 90 days from the date of sending.

Cloud Hosting Vendors:

We utilize third-party cloud hosting providers to store the data necessary for the operation of our service, including encrypted backups of postcards (before destruction) and Bitcoin transaction identifiers, as well as operational logs. These providers process data on our behalf and are contractually bound to maintain strict confidentiality and security measures. Our primary hosting provider is Linode LLC.

Legal Basis for Processing Your Personal Data

We process your personal data based on the following legal grounds:

  • Performance of a Contract: We collect and process your Photos, Postcard messages, Delivery address, and Bitcoin transaction identifiers to fulfill our contractual obligation to you by delivering the postcard you ordered.
  • Legitimate Interests: We process operational logs and aggregated data (which may include domain name and IP address) for our legitimate interests in maintaining the security, functionality, and improvement of our service, and for fraud prevention. We ensure these interests do not override your fundamental rights and freedoms.
  • Legal Obligation: We may process and disclose your data when required by law, such as in response to a valid subpoena or court order.

Our Commitments Regarding Your Data

If you provide personally identifiable information to us, we will:

  • Not sell or rent it to a third party without your explicit permission.
  • Take commercially reasonable precautions to protect the information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.
  • Not use or disclose the information except:
    • As necessary to provide services or products you have ordered, including sharing data with our third-party postcard delivery provider (Lob.com, Inc.) and hosting provider (Linode LLC) as described above.
    • In other ways described in this privacy policy or to which you have otherwise consented.
    • In the aggregate with other information in such a way so that your identity cannot reasonably be determined (for example, statistical compilations).
    • As required by law, for example, in response to a subpoena or search warrant.
    • To outside auditors who have agreed to keep the information confidential.
    • As necessary to protect the rights, safety, or property of Bitcoin Postcards, its users, or others; this may include (for example) exchanging information with other organizations for fraud protection and/or risk reduction.

Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights concerning your personal data:

  • The right to access: You have the right to request copies of your personal data we hold.
  • The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete any information you believe is incomplete.
  • The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by applicable law. We may ask you to verify your identity before responding to such requests to ensure the security of your data.

International Data Transfers

Bitcoin Postcards operates globally, and our service providers, Lob.com, Inc. and Linode LLC, are based in the United States. Therefore, your personal data may be transferred to, and processed in, the United States and other countries that may not have data protection laws equivalent to those in your jurisdiction (e.g., the European Economic Area or the United Kingdom).

To ensure your personal data receives an adequate level of protection when transferred outside your jurisdiction, we rely on legally recognized data transfer mechanisms, such as:

  • Standard Contractual Clauses (SCCs): We have implemented Standard Contractual Clauses approved by the European Commission for transfers from the EU/EEA, and the UK International Data Transfer Addendum to the EU SCCs for transfers from the UK, with our service providers where appropriate. These clauses provide contractual safeguards to ensure your data is treated in accordance with GDPR/UK GDPR standards.
  • Data Privacy Framework: We also rely on the EU-US Data Privacy Framework and its UK Extension for transfers to certified U.S. organizations, where applicable. By using our service, you acknowledge and agree to such transfers.

Changes to This Privacy Policy

We reserve the right to change this privacy policy as we deem necessary or appropriate because of legal compliance requirements or changes in our business practices. If you have provided us with an email address, we will endeavor to notify you, by email to that address, of any material change to how we will use personally identifiable information.

Questions or Comments?

If you have questions or comments about Bitcoin Postcards' privacy policy, send an email to [email protected].

Thank you for choosing Bitcoin Postcards!