Who we are
CardAff is an independent calculator that compares the real cost of virtual cards for affiliate marketing. The site is operated by the owner of cardaff.com, based in Ukraine. There is no company behind the project — it is run by a private individual.
For any question about your data write to info@cardaff.com. We answer on weekdays.
Ukraine is recognised by the European Commission as providing an adequate level of data protection, so your data does not leave the protection you are used to in the EU.
What we collect
We only collect what you send us yourself, plus the minimum the site needs to work.
When you subscribe to promo codes: your email address, your IP address at the moment of subscribing, and the page you subscribed from.
When you use the contact form: your name (optional), your email address and the text of your message.
When you suggest a service: the service name, its website and your comment.
When you use the AI service picker: the text of the task you type in. Please do not put personal data, account numbers or credentials into that field — see "AI service picker" below.
Automatically: standard server logs kept by our hosting provider (IP address, browser type, requested page), and an anonymous record of clicks on partner links — the service, the country and the referring page. Click records contain no email, no name and nothing that identifies you personally.
We never ask for and never store card numbers, passwords, passports or any payment details.
Why we may use it
Under the GDPR every use of your data needs a legal basis. Ours are:
- Your consent — for the promo-code newsletter. You confirm it by clicking the link in the confirmation email, and you can withdraw it at any time.
- Performing your request — when you write to us or suggest a service, we use your data to reply and to process what you asked for.
- Our legitimate interest — keeping the site free from bots (Cloudflare Turnstile), understanding which services readers find useful, and keeping the site secure and working.
We do not sell your data, we do not trade it, and we do not use it for automated decisions about you.
Cookies
The site sets no cookies. No analytics, no advertising pixels, no tracking of any kind — that is why you see no cookie banner here.
Your browser does store three small settings locally, on your device only, and they never reach our servers: the colour theme you picked, the interface language, and whether you collapsed the promo block.
Who else sees the data
To run the site we use a few external providers. Each of them acts on our instructions and is bound by its own data-protection terms:
| Provider | What it handles | Where |
|---|---|---|
| Cloudflare | Hosting, database, spam protection (Turnstile) | Global network, EU/US |
| MailerLite | Sending the promo-code newsletter | EU / US |
| Resend | Transactional emails (subscription confirmation, replies) | EU / US |
| Anthropic | The AI service picker | US |
Where data reaches providers outside the EU, the transfer is covered by the European Commission's Standard Contractual Clauses.
We also disclose data if the law obliges us to — for example, on a lawful request from an authority.
AI service picker
The "Top-3 by AI" feature sends the text you type to Anthropic's model to produce a recommendation. Only that text is sent — no email, no name, no click history.
Because the text leaves our infrastructure, please describe your task in general terms and keep personal data, account identifiers and credentials out of that field.
How long we keep it
| Data | Kept for |
|---|---|
| Subscriber email | Until you unsubscribe |
| IP recorded at subscription | 12 months (proof of consent) |
| Messages from the contact form | 12 months |
| Service suggestions | 12 months |
| Anonymous click logs | 24 months |
| Hosting server logs | As set by Cloudflare, usually up to 30 days |
When the period ends, the data is deleted.
Your rights
Wherever you live, you can ask us to:
- confirm what data we hold about you and get a copy of it;
- correct it if it is wrong;
- delete it;
- stop using it, or object to a particular use;
- withdraw your consent to the newsletter — the unsubscribe link at the bottom of every email does this instantly, no explanation needed.
Write to info@cardaff.com and we will respond within 30 days. If you are in the EU and believe we handled your data badly, you also have the right to complain to your national data-protection authority.
Partner links
CardAff is free for readers. We earn from partner links: the "Visit site" buttons and the links marked as sponsored lead to the services' own sites, and some of those services pay us a commission if you sign up.
This does not affect what the calculator shows you. Prices, fees and ratings come from the services' own dashboards, and the calculation ranks them by cost for your parameters — not by how much we are paid. Services that pay us nothing are listed on exactly the same terms.
Children
The site is intended for adults working in affiliate marketing. We do not knowingly collect data from anyone under 16. If you believe a child has sent us their data, write to us and we will delete it.
Changes to this policy
If we change how we handle data, we update this page and the date at the top. Material changes affecting subscribers are announced by email.