Service providers & data recipients
The third parties that may receive Cardle data and why.
Last updated 11 October 2026. See Privacy & data for the complete notice.
Vercel
Hosts Cardle and its private file storage, and processes requests and operational logs needed to deliver the service. It also counts visits to Cardle's public pages with Vercel Web Analytics, without cookies and without identifying visitors (see Visit counts on public pages). Cardle selects Vercel to operate the service.
Neon
Hosts Cardle's Postgres database, including account records, cards, activity history and protected credential records. Cardle selects Neon to operate the service.
Google Sign-In
Authenticates users and provides their email address, name and profile picture during sign-in. Cardle follows Google's OAuth and user-data policies and does not use Google API data to train generalized or non-personalized models.
Reddit advertising measurement
When your advertising preference is on, Reddit receives public-page visit and new-registration events, an ad click identifier when available, and browser and network information. We do not send account names, emails, Google credentials, private content, feed activity or assistant activity. The pixel is isolated from the sign-in form and is absent from the private app and assistant authorization flow. For visitors with a valid Reddit ad click, the advertising choice selects tracking by default worldwide, is asked once (on the public home page or at registration), and offers an opt-out before any Reddit event is sent. Other registrations skip this screen without creating or changing a preference. Read Cardle's advertising notice and controls and Reddit's Privacy Policy.
GitHub
Receives requests only when an account connects GitHub Issues with its own fine-grained token. Cardle stores the repository name and a copy of the issue content described in the privacy notice.
Your chosen AI assistant provider
If you connect an assistant through Connect AI, the provider you chose receives the tool arguments and results needed to carry out your instructions. Cardle does not select that provider or independently send it your cards; your agreement with that provider governs its handling of the data.
Cardle-operated AI
Cardle does not currently select or use a model provider for its own recommendations or model training. Before that changes, Cardle will identify the provider here and explain the information involved, purpose, retention, region and controls.