Privacy notice
Effective 19 September 2026
Cameron Low personally operates NFC Quick Card from Ontario, Canada. NFC Quick Card is a brand. This notice covers nfcquickcard.com and its hosted profile service.
Public profiles and sharing
Profiles are public web pages. Your name, handle, account email address, photo, job title, website, biography and other details you publish can be viewed, indexed, copied and saved by anyone with the link. Contact downloads can contain your email address. Google or Microsoft sign-in may create a profile using your provider name and email. Use contact details you intend to make public; do not add another person without their authority. A card or QR code links to the public page and does not make it private.
Accounts, cookies and organizations
Registration uses a name, handle, email and a hashed password. Optional Google and Microsoft sign-in use identity/profile information; the application does not request access to your email messages. Authentication uses essential session and security cookies. Dashboard preferences and a cached profile can use browser storage. Organization administrators can manage authorized members and card assignments, and see the records their permissions allow. Signing out ends access on that browser; it does not delete your account or public page.
Hosting, uploads and providers
Hostinger infrastructure hosts the application and MySQL database in the United States. Amazon Web Services S3 stores uploaded profile images in Ohio, United States. No Canadian-only residency is promised. Public profiles can also use external image URLs: opening a page can send your IP address and browser information to that image host. Google and Microsoft process sign-in information under their own notices. Upload only images you have permission to publish and avoid sensitive documents.
Visits and infrastructure records
Infrastructure processes IP addresses, requested URLs, time, browser, referring page and response status for delivery and security. Ordinary hosting-edge access logs rotate daily, retaining up to 14 rotated files; incident copies and provider records may last longer. The previous optional Nexus/Umami website tracker has been removed. Historical analytics may remain until deletion.
Profile visit counts
The service records profile visits for account and administrator dashboards. New records include the profile identifier, time, a bounded browser string and a referring origin/path with query strings, fragments and credentials removed. New profile-visit records do not store IP addresses; browser Do Not Track skips this optional counting. Earlier records may contain IP addresses and full referrers. These records have no automatic expiry. Infrastructure security logs are separate and can still contain IP addresses.
Contact and retention
Email to hello@cameronlow.com is forwarded through Cloudflare Email Routing to a Google-hosted mailbox. Your address, message and attachments are used to respond, handle requests or investigate an issue; emailing does not subscribe you to marketing. Accounts, profiles, visit records, correspondence and uploaded images currently have no universal automatic deletion deadline. When replacing or clearing a saved uploaded profile image, the service attempts to remove the old object from this account’s upload path and reports a failure rather than silently discarding its reference. Abandoned uploads, historical objects, external images, visitor copies and backups can remain; ask Cameron to include these limits in a deletion request.
Access, correction and deletion
You can edit available public profile fields in the product and request access, export, correction, account closure or deletion by emailing Cameron. Explain the affected handle without sending passwords. Proportionate identity verification may be needed. Account deletion is currently handled by request; there is no self-service account erasure control. Cameron will explain what is removed and any legal, technical or backup limits. A uniform backup erasure deadline has not been verified. Removing a page cannot recall copies held by visitors, search engines or recipients.
Rights and changes
Cameron does not sell personal information or share it for targeted advertising. Information may be disclosed to necessary service providers, with your authorization, or to meet legal obligations or address security issues. You can raise a privacy complaint with Cameron and the relevant privacy regulator, including the Office of the Privacy Commissioner of Canada. This professional contact-sharing service is not directed at children. Material changes will be described in an updated dated notice before the affected new use begins.
Contact
Cameron Low, Ontario, Canada · hello@cameronlow.com