Privacy policy

Last updated November 2, 2026.

Your data

Your cards, card photos, statements and Social Security numbers are stored on your computer, with the backups the program makes there, locked with AES-256-GCM under a key made from your password. The program does not send them to us. The Windows app makes two connections: a licence check (your licence key and a random install ID go to our licence server, which records them in your subscription at Stripe and keeps nothing itself) and a daily update check (which sends no key and no ID). If you lose both your password and your recovery key, nobody, including us, can open your data. The lock protects a stolen or copied file; it cannot protect an unlocked program on a computer with malware. The security was reviewed by AI models, not by a paid outside firm.

A photo of the back of a card shows its security code. Keeping one is your choice. Card companies tell stores not to keep that code; you would be keeping it on your own computer, locked with your password. Anyone who opens the program, or a virus on that computer while the program is unlocked, can see it. We cannot see it or get it back. You can delete a photo at any time.

What we collect

When you subscribe. Stripe takes your payment for us and keeps your name, email, billing address, the last four digits of your card and your payments, for as long as tax law requires. We see the same details in our Stripe account; we never see your full card number. We keep a record that you agreed to the renewal terms (order number, date, version of the terms) for 3 years after your subscription ends.

The licence check. Near the end of each paid period the program sends your licence key and a random install ID to our licence server. It asks Stripe whether you are paid up, records the key and the install ID in your subscription at Stripe, and keeps nothing itself. Cloudflare, our host, sees your IP address.

The update check. Once a day the program asks our update host (also Cloudflare) whether a new version exists. It sends no key and no ID; the host sees your IP address and the time.

This page. Served by Cloudflare, which sees your IP address. No cookies, no analytics, nothing loaded from other sites.

Your emails to us. Kept until you ask us to delete them.

What we never collect

Anything you enter in the program: no cards, balances, photos, statements or notes. No crash reports and no usage counters.

Who else handles data

Stripe (payments), Cloudflare (this page, the update files, the licence server) and our email provider. We do not sell your information.

The rest

We do not track anyone, so there is nothing for a "do not track" signal to switch off. Deckspade is for adults; we do not knowingly sell to anyone under 18. If this policy changes, we update it here first and announce it by email at least 30 days ahead. Questions or a request to delete your emails: info@octachainlabs.com.