The short version: We collect only what we need to run Skills. We never sell your data. Your card is public only because you chose to make it public. You can delete everything at any time.
Skills. ("we", "us", "our") operates the digital business card platform at myskillscard.xyz. If you have questions about this policy, contact us at myskillscard@gmail.com.
Information you give us directly:
- Account info: name, email address, password (hashed by Firebase Auth)
- Card content: bio, job title, photo, social links, payment handles, skills tags, media gallery, welcome video
- Networking contacts you add manually or by scanning another Skills. card
- Lead capture submissions from visitors to your card
- Feature requests and support messages you send us
Information collected automatically:
- Card view counts — we record when your public card is visited
- Device fingerprint data used solely for lead capture rate limiting (prevents spam)
- Basic browser/device info included in standard web requests
We do not use third-party analytics trackers, ad networks, or cookie-based tracking on your card page.
Device fingerprint data: To prevent abuse and stop users from creating multiple accounts from the same device, we collect a device fingerprint — a combination of device model, operating system, screen resolution, timezone, and similar non-identifying signals. This fingerprint does not include your IMEI, serial number, or any hardware identifier prohibited by Apple or Google. It is stored securely and used solely for fraud prevention.
Business address: Providers may enter a business or service address. This is displayed on your public card so clients can contact or locate you. We do not track your real-time location.
- To create and display your public Skills. card
- To send you account-related emails (welcome, plan upgrades)
- To enforce plan limits and prevent abuse
- To provide you with your networking contacts and leads dashboard
- To improve the platform based on aggregated, anonymized usage patterns
We do not sell, rent, or trade your personal data to any third party.
Subscription payments are processed through Square. We do not store your full credit card number, CVV, or billing details on our servers. Square collects and handles payment data under their own privacy policy. We retain only your subscription status, plan type, and transaction reference for account management.
When you initiate a payment, a pending order record is written to our database and a notification is sent to our team to confirm and activate your plan.
When a visitor saves your contact information from your Skills. card (a "reverse share"), we record that interaction and store the visitor's submitted details — such as name, email, and phone — in your CRM dashboard. This data belongs to you and is not shared with other users or used for our own marketing.
Visitors who submit their information through your card are consenting to share it with you as the card owner.
When you publish a card on Skills., the information you choose to include — your name, photo, bio, links, and other card fields — becomes publicly accessible at your card URL (e.g., myskillscard.xyz/yourname).
You control what appears on your card. You can edit or remove any field at any time from your dashboard. Deleting your account removes your public card.
Visitors to your card may interact with the AI chat assistant. Conversations with the AI assistant are not stored long-term and are not linked to visitor identity.
Your data is stored in Google Firebase (Firestore and Firebase Storage), hosted in the us-central1 region. Firebase is SOC 2 compliant and encrypts data at rest and in transit.
Access to your data is restricted by Firestore security rules — only you and our admin team can read your private data. Your public card fields are readable by anyone, by design.
We take reasonable technical measures to protect your data, but no system is perfectly secure. Please use a strong, unique password for your account.
We use the following third-party services to operate Skills.:
- Google Firebase — authentication, database, file storage, hosting
- EmailJS — transactional email delivery (welcome and upgrade emails)
- Anthropic Claude API — powers the AI chat assistant on your card
- QRCode.js — generates QR codes client-side (no data sent to servers)
Each of these providers has their own privacy policy. We only share the minimum data necessary with each service to perform their function.
When a visitor submits their contact info through the lead capture form on your card, that data (name, phone, email) is stored in your account and visible to you in your dashboard. It is not shared with other users or third parties.
Visitors who submit lead forms are consenting to share their information with the card owner. We do not use lead capture data for our own marketing.
You have the right to:
- Access — view all data associated with your account via your dashboard
- Edit — update any information on your card at any time
- Delete — remove your account and all associated data by contacting us or using the delete option in your dashboard
- Export — download your networking contacts as a CSV from your dashboard
To exercise any of these rights or for data-related requests, email myskillscard@gmail.com. We respond within 5 business days.
Skills. is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We'll notify active users of material changes via email or an in-app announcement. The "last updated" date at the top of this page will always reflect the most recent revision.
Questions about your privacy?
Email us at myskillscard@gmail.com — we read and respond to every message.