Privacy Policy

.cardvault™ Comprehensive Data Protection

GDPR Compliant
US Privacy Laws
Swiss FADP

Last Updated: October 15, 2025

Welcome to .cardvault™ Privacy Protection

Welcome to the .cardvault™ website, operated by .cardvault™, located at P.O. Box 310121, New Braunfels, Texas 78131, and powered by Freename AG, Samstagernstrasse 41, Wollerau, Switzerland ("We," "Us," "Our").

We're committed to protecting your privacy when you use our Platform to register and manage .cardvault™ Web3 domain names. This Privacy Policy explains how we collect, use, and protect your personal data.

Who We Are

Primary Data Controller

.cardvault™

P.O. Box 310121

New Braunfels, Texas 78131

Technology Partner

Freename AG

Samstagernstrasse 41

Wollerau, Switzerland

If we share responsibility for your data with others, we'll let you know in accordance with applicable data protection laws.

What Data We Collect and Why

We collect only the personal data needed to provide and improve our .cardvault™ domain services:

Contact Information

  • Name and email address
  • Physical address
  • Phone number

Account Information

  • Username and password
  • Wallet details
  • Domain preferences

Usage Data

  • Browser and device information
  • IP address
  • Pages visited

Communication Data

  • Contact form messages
  • Support requests
  • Communication preferences

Why We Collect Your Data

Register & Manage

Register and manage your .cardvault™ domain

Process Payments

Process payments and royalties

Send Updates

Send important updates (e.g., renewal reminders)

Improve Platform

Improve Platform security and user experience

Legal Compliance

Comply with legal requirements

Sharing Your Data

We may share your data with the following parties, always with appropriate safeguards:

Service Providers

We work with trusted service providers to deliver our platform:

  • Web hosting services
  • Payment processors (Stripe, Coinbase Commerce)
  • Email services
  • Analytics providers

Registries

For Web2 domain registration:

  • Registries (Nominet, Verisign)
  • WHOIS database
  • Domain management systems

Legal Authorities

When required by:

  • Court orders
  • Law enforcement requests
  • Regulatory compliance

International Data Transfers

As a Texas-based entity, our primary data processing occurs within the United States. Some partners are in Switzerland, the UK, or the EEA. We ensure appropriate safeguards through:

Standard Contractual Clauses

Standard Contractual Clauses (SCCs)

Privacy Framework

US-EU and Swiss-US Data Privacy Framework compliance

Adequacy Decisions

Adequacy decisions where available

Your Data Protection Rights

You have comprehensive rights under applicable data protection laws, including US state privacy laws (California CCPA/CPRA, Texas, Virginia, Colorado), Swiss FADP, and where applicable, GDPR/UK GDPR:

Access & Know

See what personal data we have about you and how we use it.

Correction

Fix inaccurate personal information.

Deletion

Request deletion of your personal data.

Opt-Out of Sale

Opt out of personal data "sales" or sharing.

Portability

Get your data in a usable format.

Non-Discrimination

No discrimination for exercising privacy rights.

Exercise Your Rights

To exercise these rights under US or international law, contact us at:

Primary Contact

[email protected]

Technology Partner

[email protected]

Identity Verification

We may need to verify your identity before processing requests to protect your privacy.

Data Security

We implement comprehensive security measures following US federal standards (NIST Cybersecurity Framework) and international best practices to protect your data from unauthorized access, disclosure, alteration, or destruction.

Technical Safeguards

HTTPS/TLS 1.3 encryption

End-to-end encryption for all data in transit

SOC 2 compliant data centers

Industry-standard compliant infrastructure

Multi-factor authentication

Enhanced account security protection

Regular security updates

Continuous system patching and maintenance

Intrusion detection

24/7 monitoring and threat detection

Data encryption at rest

Complete data protection when stored

Administrative Safeguards

Background checks

Thorough vetting of all personnel

Regular security training

Ongoing staff education and awareness

Incident response procedures

Rapid response to security events

Data minimization policies

Collecting only necessary information

Third-party assessments

Independent security evaluations

Business continuity planning

Ensuring service availability

Security Transparency

While we implement industry-leading security measures, no online system is 100% secure.

Internet communications may be subject to monitoring by government authorities under applicable US federal and state laws.

Cookies and Tracking

We use cookies (small data files stored in your browser) to enhance your experience and improve our services.

Essential Cookies

Session cookies, security tokens, and user preferences that make our Platform work properly.

These are required for basic functionality

Analytics Cookies

Google Analytics, page view tracking, and performance metrics to help us understand usage.

Helps improve our services

Marketing Cookies

Personalized ads, campaign tracking, and social media pixels to show relevant content.

Enables personalized experiences

Manage Your Cookie Preferences

You have control over how cookies are used on our platform:

Browser Settings

Manage cookies in your browser preferences

Opt-Out Tools

Use YourAdChoices or Network Advertising Initiative

Third-Party Analytics

Google Analytics (anonymized IP)
ActiveCampaign for email marketing

Third-Party Services

We use trusted third-party services to run our Platform, each with their own privacy practices:

WordPress.com

Website infrastructure by Automattic Inc.

Stripe

Secure payment processing

Coinbase Commerce

Cryptocurrency payments

YouTube

Embedded video content

These providers may use cookies or collect your IP address to deliver services. We ensure they follow data protection rules.

Notifications and Emails

Optional Communications

  • Marketing newsletters
  • Product updates
  • Educational content

You can unsubscribe anytime

Essential Communications

  • Account security alerts
  • Domain renewal notices
  • Service updates

Required for account security

We may send you emails or messages (e.g., newsletters, renewal reminders) to your registered email address. These may include tracking pixels to help us improve our communications.

Social Media

We're active on social media platforms to share updates about .cardvault™ domains. If you interact with us there, your data may be processed by those platforms, which may be outside the UK/EEA.

Check the privacy policies of social media platforms (Facebook, Twitter, LinkedIn, etc.) for details on how they handle your data.

Facebook

Twitter

LinkedIn

WHOIS Data

Public WHOIS Database

For Web2 domains linked to your .cardvault™ domain, your name and contact details may appear in the public WHOIS database, unless specific protections apply.

We still keep your true data for legal and Registry purposes

Data Protection Options

.uk domains

Non-business registrants have data redacted by default

WHOIS Privacy Service

Available for eligible domains (uses proxy details)

Updates to This Policy

We may update this Privacy Policy to reflect changes in our services or laws. We'll post updates on our Platform and notify you via email when material changes occur.

Continued use of the Platform after updates means you accept the updated policy.

Stay Informed

We'll keep you updated on all policy changes

Contact Us About Privacy

For any questions about how we handle your personal data, to exercise your privacy rights, or to report privacy concerns, please contact us using the information below.

Primary Data Controller

.cardvault™

P.O. Box 310121

New Braunfels, Texas 78131

Technology Partner

Freename AG

Samstagernstrasse 41

Wollerau, Switzerland

Our Commitment to You

We're committed to responding to your privacy inquiries promptly and transparently. We may need to verify your identity before processing certain requests to protect your privacy.

Ready to Register Your Domain?

A .cardvault™ domain is a secure, modern way to build your digital presence. Your privacy is protected with industry-leading security measures.

Last Updated: October 15, 2025 • GDPR Compliant • US Privacy Laws • Swiss FADP

This Privacy Policy constitutes our commitment to protecting your personal data in accordance with the highest international standards. By using our Platform, you acknowledge that you have read and understood our privacy practices.

WEB3
VAULT
REVOLUTION

Igniting the crypto vault revolution through Web3 technology. Own your assets, tokenize your cards, build the future.