Privacy Policy

1. Information We Collect

When you use GiftCard Verify, we collect the following information to provide our verification service:

• Gift card type, currency, and face value (used for verification context)
• Gift card code and optional PIN (encrypted with AES-256-GCM before storage)
• IP address and approximate geographic location (for fraud prevention and rate limiting)
• Browser user agent string (for bot detection)

2. How We Use Your Information

We use collected information to:

• Process your gift card verification request
• Prevent fraud, duplicate submissions, and abuse
• Maintain audit logs for security compliance
• Improve service reliability and performance

3. Data Security

We take data security seriously. All gift card codes and PINs are encrypted using AES-256-GCM encryption before being stored in our database. Encryption keys are managed separately and never stored alongside encrypted data. We never store your card credentials in plain text at any point.

4. Data Retention

Verification requests and results are retained for 90 days for audit and compliance purposes, after which they are automatically deleted. Audit logs are retained for 12 months.

5. Third-Party Providers

To perform gift card verification, we may transmit encrypted card data to authorized verification providers. These providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than verification.

6. No Account Required

We do not collect any personally identifiable information (PII) such as names, email addresses, or phone numbers. No account is required and no cookies are used for tracking purposes.

7. Contact Us

For privacy-related questions, contact us at privacy@giftcardverify.com