Effective 31 October 2026
Who is responsible
Human Transition is operated by Antonin Cohen in the United States. For privacy questions or requests, email contact@humantransition.org.
What we collect
- Your account: your email address and email-confirmation records.
- Your card: your declared name, optional country, the choices and limits you enter, and the dates and versions you confirm.
- Account security: session and verification records, plus short-lived, protected identifiers used to limit abuse.
- Messages you send us: your contact details and whatever you include in your email.
You do not need to provide your birthplace, exact address, date of birth, family members’ emails, identity documents, photographs or recordings to create a card. Please leave sensitive documents and other people’s private information out of contact messages.
When your answers are saved
Your unfinished card stays in the open browser tab. Requesting a code sends us your email address so we can verify it. We save your card instructions only after you review them and select the final confirmation. Closing or refreshing an unfinished form can lose that draft.
How we use your information
We use it to provide and manage your card, verify access, deliver service emails, answer your requests and prevent misuse. Creating a card does not join a mailing list, create a SEED account or authorize AI training. We do not sell card information or use it for advertising.
Who processes it
Cloudflare provides website hosting, network protection and database services. Resend delivers verification emails; those emails contain a sign-in code, not your card instructions. Email you send to our contact address is routed through Cloudflare to our Google-hosted inbox.
Authorized people operating the service may access information when needed to maintain it or handle your request. Sponsorship does not grant access to your card. We do not send your card details to SEED for its products or marketing. We may disclose information when legally required or when necessary to investigate misuse and protect people’s rights.
Our service providers may process information in the United States and other countries where they operate. We do not promise that every part of the service is confined to one country.
How long we keep it
- Saved cards and their history: while you keep your account. A change creates a new version. Withdrawing your current card does not delete its history.
- Verification codes: valid for 10 minutes. Expired verification and abuse-control records are cleared through scheduled cleanup.
- Sign-in sessions: up to 7 days, or until ended. Short-lived abuse-control records are kept for up to 24 hours.
- After account deletion: your live account, instructions, history and sessions are removed. A random deletion record without your name, email or card choices is kept for 35 days to help prevent restoration of deleted accounts.
- Recovery copies: deleted information can remain in restricted database recovery history for up to 30 days before it expires.
- Contact messages: normally until 12 months after the conversation is closed, unless longer retention is needed to meet a legal obligation or address a dispute.
Hosting and email providers also maintain operational and delivery records under their own retention policies. Downloaded cards and messages you have already shared remain with their recipients.
Protection and its limits
We use HTTPS, private account access and encryption for stored email addresses and card instructions, with encryption keys kept separately from the database. The service can decrypt records to show them to you; this is not end-to-end encryption. No online service can promise that a security incident is impossible.
Your email inbox is the key to your account. Protect it with strong sign-in security and never share your verification code. We will not ask you to send a code by email.
Your controls
In My card, you can review or replace your instructions, download your information, withdraw your current card and delete your account. Withdrawal means no current instruction is supplied by this service; it does not mean you consent to an avatar. Deletion is a separate action.
For other access, correction, deletion or privacy requests, contact us. We may need to confirm that a request comes from the account holder. Depending on where you live and which law applies, you may have additional rights, including objection, restriction, portability or a complaint to a privacy regulator. We will explain any applicable limit when responding.
Cookies and tracking
We use a necessary sign-in cookie to keep you connected to your account. We do not use advertising cookies, third-party analytics or session-replay tools on the site. Our hosting provider still processes network information needed to deliver and protect the service.
Age and changes
The card service is for adults aged 18 or older creating their own instructions. If you believe a child has submitted information, contact us so we can review and remove it where appropriate.
We will update this page if our practices change and show the effective date. Material changes affecting existing cards will be explained through the service or a service email before they take effect where required.