What I keep, and what I don't

If you buy a card

I keep your email address, the cards you chose, the kindness for each one, and any address you typed in, whether a friend's or your own. That is what I need to write and post the cards, and to tell you your card numbers.

Once the cards are in the mail, I delete every address on the order. I keep your email and what you bought, as the record of the sale.

Payment is handled by Stripe. Your card number goes straight to Stripe and never reaches this website or me. Stripe also asks for your billing address. The site uses it once, to make sure you are never sent a card addressed to your own home, and then lets it go. Stripe keeps its own record of the payment, under its own privacy policy.

If you ask to receive a card

I keep the name you gave (or Current Resident, if you chose that), your address, and your email. The email is used to confirm the address really is yours, and to make sure you are never sent a card you paid for yourself. It is never written on a card or shown to anyone.

If you do not click the confirmation link within a week, the address is deleted. Once your card has been mailed, it is deleted too. If you change your mind before then, tell me and I will take you out of the pool.

If a card arrived out of the blue

Your address came from one of three places. You added it yourself; or a friend or family member typed it in when they bought a card for you; or it came from a list of residential addresses bought from a company that sells them legally. The list has no names on it, which is why those cards say Current Resident.

Whichever way it came, once your card was mailed the address was deleted. For an address from the list, all that remains is a note that it has been used, so it is never picked again. If you would rather not receive another card, tell me and I will make sure of it.

If you leave a note on a card

I read every note before it goes up. Once it is approved, the note and the name you chose to sign it with appear on that card's page for anyone to read. If you gave an email address, it is never shown. I use it only if I need to reply to you.

If you asked to be told when someone writes on a card you sent, I keep your email for that, and only for that. Ask and I will stop.

If you leave a general comment

A comment sent from Leave a general comment comes to my email inbox and is never shown on the site. If you gave an email address, I use it only to reply to you.

Who else sees any of this

Only me. A few services do the work behind the site, and each one handles only what its job needs: Stripe takes payments, Replit runs the website and stores its records, and Resend and Namecheap carry the emails. None of them is given your information to use for anything of their own, and I never sell or share it with anyone else.

Cookies and tracking

There are no advertising cookies and no trackers following you around the internet. While you fill your basket, your own browser remembers it in that tab until you pay or close the tab. To stop floods of junk, the site notes your connection's internet address for up to an hour when you send something, then forgets it. Like any website, the hosting service keeps ordinary logs of visits.

Seeing or removing what I hold

Write to me at hello@randomartandkindness.art and I will tell you what I have about you, correct it, or delete it. The one thing I keep regardless is the record of a payment, which the law requires me to keep for my accounts.

Last updated 30 September 2026.

---