Last updated: August 6, 2026. Effective immediately.
The short version: this website collects nothing about you unless you buy something, and then only your email address, handed to us by Stripe so we can send your key. There is no account, no database, no analytics, no advertising pixel, and no tracking cookie. Anything you type into the Credit Profile Analyzer is processed inside your own browser and is never transmitted to us. We could not sell your data if we wanted to, because we never receive it.
1 · Who we are
Instant Capital: Card Grabber is operated by World Class Tech & Design LLC, Seattle, Washington. You can reach us about anything in this policy at jacksonalexande@gmail.com.
2 · What we collect
From visitors: none. Browsing the site, using the card board and running the Credit Profile Analyzer require no name, email address, phone number, mailing address, Social Security number, date of birth, or financial account number. There is no sign-up and no login, and none of those are ever requested.
From buyers: your email address only, and only if you choose to buy a membership — see section 8. We never receive a card number.
Our hosting provider (Vercel) records standard server request logs, which may include your IP address, browser type, and the page requested. These are generated automatically by the web server, are used only to keep the site running and secure, and are not linked to you by us.
3 · What happens to what you type into the analyzer
The Credit Profile Analyzer runs entirely inside your browser. When you paste a credit summary or type in figures, that text is read by JavaScript running on your own device, matched against our card list, and displayed back to you. It is never uploaded, never stored on a server, and never seen by us or by anyone else. Close the tab and it is gone.
4 · Local storage on your own device
The site stores a small amount of information in your browser's local storage, on your device only. Today that is: whether you have accepted the Terms of Use, any floor code you have entered, and anything you enter into the Workspace application log. This never leaves your computer and is not readable by us. You can clear it at any time through your browser settings, or with the “Clear log” button in the Workspace.
5 · Cookies and tracking
We set no cookies. We run no analytics package, no advertising network, no session recording, no heatmaps, and no third-party trackers.
6 · Do Not Track
Some browsers send a "Do Not Track" signal. Because this site does not track visitors across time or across third-party websites under any circumstances, there is no tracking for such a signal to disable. We do not change our behaviour based on it, because our behaviour is already not to track.
7 · How we enforce this, not just promise it
The page installs a guard before any other code runs that refuses outbound network requests: anything cross-origin, anything carrying a body, any beacon and any socket is blocked and logged to the browser console. The only requests it permits are the site's own files. This is deliberate belt-and-braces on top of our Content Security Policy, so that a future change cannot quietly start sending your information somewhere. You can verify it yourself in your browser's developer tools.
8 · Third parties
We do not permit third parties to collect personally identifiable information about your activity on this site.
The site loads a web font from Google Fonts, which means your browser makes a request to Google's servers. It links out to credit card issuers' own websites; once you click through, that issuer's privacy policy governs, not ours.
If you buy a membership, the payment is handled by Stripe on Stripe's own systems. Card numbers never pass through this site and we never see them. Stripe does pass us your email address and the fact that you paid, because we need those to send you your membership key and to process a refund if you ask for one. That is the only personal information we ever hold about anyone, we keep it in our own email and payment records rather than on this website, we do not add you to any marketing list, and we never sell or share it. You can ask us to delete it once your refund window has closed. Stripe's own handling of your data is governed by Stripe's privacy policy.
9 · Sharing and selling
We do not sell, rent, trade, or share personal information — not the email address of a buyer, not anything else. We run no marketing list. If that ever changes, this policy will be updated before the change takes effect.
10 · Your rights
California residents have rights under the CCPA to know what personal information is collected, to request deletion, and to opt out of sale. If you have never bought anything from us we hold nothing about you at all. If you have, we hold your email address and your purchase record — email us and we will tell you exactly what that is, or delete it once your refund window has closed and our tax-record obligations allow. We never sell personal information, so there is nothing to opt out of. We respond within 45 days.
11 · Children
This site is intended for people 18 and older and is not directed at children. We do not knowingly collect information from anyone under 13.
12 · Security
The site is served over HTTPS only, with HTTP Strict Transport Security, a strict Content Security Policy, and clickjacking protection. Because we store no personal data on this website, there is no store of personal data here to breach.
13 · Changes
If we change this policy we will update the date at the top and post the revised version here. Material changes will be flagged on the site itself.
14 · Contact
World Class Tech & Design LLC · Seattle, Washington · jacksonalexande@gmail.com