PRIVACYHYPERLANEWORKS · COOKIES & DATA

What we keep, and what we don't.

The short version: we store what the app needs to work, plus optional analytics and ad measurement that you control and that stay off until you say yes. No data broking, and nothing sold. This page spells out the details.

LAST UPDATED · 13 September 2026

Cookies & local storage

3 CATEGORIES

Most of what we keep is not a cookie at all: it's local storage in your own browser, which never travels to us with a request. Either way the rules are the same, so both are listed. Nothing in the analytics or advertising rows loads until you allow it.

Strictly necessary

No consent needed

These deliver the thing you explicitly asked for. Turning them off would break the service, so the law does not require consent for them, and we don't have a switch for them either.

Name	Type	Set by	Purpose	Kept for
hlw.cookieConsent	Local storage	HyperlaneWorks	Remembers the cookie choice you made here, so we stop asking.	Until you clear it
cardlane.editToken.*	Local storage	HyperlaneWorks	The key to editing a card you made, so the edit link keeps working on this device without an account.	Until you clear it
cardlane.myCards	Local storage	HyperlaneWorks	The list of cards you made or opened in this browser, so you can find them again without an account. Stays on your device. It is never sent to us.	Until you clear it
cardlane.adminToken	Local storage	HyperlaneWorks	Staff sign-in for the admin area. Never set for visitors.	Until sign-out
Paddle checkout	Cookies	Paddle.com Market Ltd	Runs the Premium checkout and its fraud checks. Loaded only at the moment you open checkout, not before.	Set by Paddle

Analytics

Off until you allow it

Two tools: Microsoft Clarity, to see which parts of the app confuse people (where a form gets abandoned, which button nobody finds), and Google Analytics, to count visits, where they come from, and how many end in a purchase. Both are optional, off by default, and refusing them changes nothing about how the site works for you.

Name	Type	Set by	Purpose	Kept for
_clck	Cookie	Microsoft Clarity	Ties this browser's visits together for usage statistics.	1 year
_clsk	Cookie	Microsoft Clarity	Groups the page views within a single visit.	1 day
MUID, ANONCHK, CLID, SM	Cookies	Microsoft	Microsoft's own identifiers, set on their domains when Clarity runs. Set only with your consent.	Up to 1 year
_ga, _ga_*	Cookies	Google Analytics	Distinguishes visitors and visits for traffic and purchase statistics.	2 years

Clarity records anonymised session replays: mouse movement, clicks, scrolling. It masks text content by default, and we do not use it to identify anyone. Microsoft's own notice: privacy.microsoft.com.

Google Analytics records which pages are viewed, how the visit started (a search, a link, an ad) and whether a Premium purchase completed, with the order amount. It does not receive your card's contents. Google's notice: policies.google.com.

Advertising

Off until you allow it

We advertise on Google. With this on, Google can tell us whether you arrived from one of our ads and whether that visit led to a purchase, and we can show our ads again to people who have visited before. It works through Google Analytics, so it does nothing unless analytics is on too. We show no ads on this site.

Name	Type	Set by	Purpose	Kept for
_gcl_au, _gcl_aw	Cookies	Google Ads	Remembers the ad click that brought you here, so a later purchase can be credited to it.	90 days
IDE, NID, and similar	Cookies	Google	Google's own advertising identifiers, set on their domains. Set only with your consent.	Up to 13 months

Change your mind, any time

Withdrawing is as easy as agreeing: one click here, or the Cookie settings link in the footer of every page. If you refuse, Clarity and Google's tag are never loaded, and their cookies are cleared.

The data behind a card

CARDLANE

What you give us

Card contents: name, role, company, phone, website, links, colours, and any images you upload. This is published at your card's link, which is the whole point of it.
Your email address: used to send you the edit link for your card and the codes that re-open editing later. It is not shown on the card and we don't send marketing to it.
Support messages: whatever you write on the support form, so we can reply.
Payment details: handled entirely by Paddle. Card numbers never reach our servers; we're told only that a payment succeeded and for which card.

How long it stays

A card and its contents live until you ask us to remove it. Write to support@hyperlaneworks.com and we'll take it down.
Server logs, which include IP addresses and request paths, are kept short-term for security and debugging.
Payment records are kept by Paddle for as long as tax and accounting rules require.

Who else sees it

Paddle: payments and merchant of record.
Resend: delivers our emails to you.
Google Cloud: stores uploaded images; hosting.
Apple / Google: only if you add a card to Apple Wallet or Google Wallet, which sends that pass to them.
Microsoft: analytics, and only with your consent.
Google: analytics and ad measurement, each only with your consent.

Google Fonts are served from Google's CDN, which means your IP address reaches Google when a page loads. No cookie is set by it.

Your rights

GDPR · UK GDPR · CCPA

See it

Ask for a copy of what we hold about you.

Fix it

Correct anything wrong. You can edit a card's contents yourself.

Delete it

Have a card and its data removed. One email does it.

Refuse it

Withdraw analytics or advertising consent whenever you like, with no effect on the service.

We rely on consent for analytics and advertising, on performing our contract with you for running a card and taking payment, and on legitimate interests for keeping the service secure. We do not sell personal information, and share it with Google for advertising only if you switch that on. To exercise any of the above, or to complain, write to support@hyperlaneworks.com. We answer within one month. You can also complain to your local data protection authority.

HyperlaneWorks is a small independent software studio based in Belgrade, Serbia. If this notice changes we'll update the date at the top, and if the change affects what we do with cookies we'll ask for your choice again.