Privacy
Your card needs very little. Here’s exactly what it keeps, where it lives, and how to erase it.
UPDATED SEPTEMBER 28, 2026
Who’s responsible
Rox (roxybaby) is responsible for protecting your personal information. For a question or a request, message me on Instagram (@roxybabyyz).
What your card keeps
- Your first name.
- Your cell number: it’s how I find your card. I don’t send you texts.
- Your checked-in piercings and their dates, for your squares and your healing tracker.
- The appointment you note yourself, if you note one.
- Who invited you and who you invited, for friend squares.
Nothing else: no email, no address, no birth date, no payment.
Why
Only to run your card: count your squares, give you your 10th piercing, track your healing and hand out friend squares. I don’t sell anything, share anything, or send you ads.
Cookies
Just one, so you stay signed in to your card on your phone. No Google Analytics, no Facebook pixel, no ads.
Where it’s kept
With Vercel (the site’s hosting) and Neon (the database), on servers in the United States. Connections are encrypted, and only Rox and the person who maintains the site can access it.
How long
As long as your card exists. You can delete it whenever you want, and everything goes with it.
Your rights
You can see your information (it’s all on your card), have it corrected, or erase it all: on your card, tap “delete my card” at the bottom of the page, or message me on Instagram. If something doesn’t seem right, you can also contact the Commission d’accès à l’information du Québec.
Under 14
Your parent creates the card for you, with their consent.