What CardCircle knows about you

Short version: which cards you hold, and nothing that could be used to spend money.

Never stored, at all

Full card number, CVV, PIN, OTP, net-banking credentials, expiry date, last-4 digits. There is no database column for any of them, and an automated check fails the build if one is ever added.

Stored

Your mobile number, encrypted, plus a keyed digest so friends can find you by it.
Your password, hashed with Argon2id. Never recoverable.
For each card: which card it is, its network, and the first six digits — with your choice of who may see those digits.

You decide who sees what

Every card chooses who can discover it and who can see its first six digits. Hidden means the server never sends the digits — they are absent from the response, not blanked in the page — and the card cannot be found by searching them either. Your phone number is shared only if you switch it on.

Worth knowing

Mobile numbers are not verified — this build sends no OTP — so a number is only as trustworthy as the person who typed it. Deleting your account removes everything you own immediately.

Questions

Write to ysaimuppineni789@gmail.com.