Privacy Policy
Last updated: November 15, 2026
This document is provided in English. Translations of the interface do not change the terms.
1. Who we are
CardGlee ("CardGlee", "we", "us") operates the website at cardglee.com and provides account and dashboard software for crypto-funded prepaid cards. Cards are issued by licensed partner institutions under Visa and Mastercard programmes. CardGlee is a technology provider, not a bank and not a card issuer.
2. What we collect
- Account data: the email address you confirm, your chosen interface language, and your account settings.
- Authentication data: a cryptographic hash of your access seed and an encrypted copy used to show the seed back to you on request. We never store the seed in plain text.
- Transaction data: deposits, withdrawals, card requests, balances, tickets and the metadata needed to operate them.
- Technical data: IP address, country (derived from your connection), browser user agent and timestamps of sign-ins and security events.
- Support data: ticket messages and files you choose to send.
We do not ask for identity documents, selfies, proof of address or phone numbers as a condition of opening an account.
3. Why we use it
- To operate your account, process deposits and withdrawals, and provide support.
- To secure the service — fraud prevention, rate limiting, abuse investigation.
- To send transactional emails such as sign-in alerts, 3D Secure codes and support replies.
- To comply with applicable law and lawful requests from competent authorities.
4. Legal bases
Where data protection law requires a legal basis, we rely on performance of a contract (operating your account), legitimate interests (security and service integrity), consent (optional communications) and legal obligation (record-keeping and lawful requests).
5. Sharing
We share data with card programme partners only where necessary to operate the service, with infrastructure providers that host the platform, and with authorities where we are legally required to do so. We do not sell personal data.
6. Retention
Account and transaction records are kept for as long as your account is active and for the period required by applicable record-keeping rules. Security logs are kept for a limited period. You can ask us to delete data that we are not legally required to keep.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal data, to object to processing, and to lodge a complaint with a supervisory authority. Contact us through a support ticket from your dashboard.
8. Security
The platform runs over TLS, seeds are stored using keyed hashes and authenticated encryption, sessions are protected with httpOnly cookies, and optional TOTP two-factor authentication is available. No system is perfectly secure; use a unique email address and keep your seed offline.
9. Cookies
We use strictly functional cookies for the session and your language preference. We do not use advertising cookies on the dashboard.
10. Changes and contact
We may update this policy as the service evolves. The latest version is always published on this page. For questions, open a support ticket from your dashboard.