Privacy Policy

Effective 2026-10-30. QSL.now is operated by Ian Owens, WB4OGQ. Support: support@qsl.now.

The short version: we keep what we need to make and deliver your cards, we never sell it, and we never share it except with the services you ask us to send it to.

What we collect

• Account: email address, username, a salted hash of your password, and the station profile you fill in (callsign, name, QTH, state, county, grid, default card size, award preferences).
• Logs: the ADIF records you upload, or the check-ins you select from a NetLogger net. These contain the callsigns of the stations you worked and, when present in your log, their names, locations, and email addresses.
• Designs: artwork you upload, the field placements you approve, and the cards and PDFs we render.
• Delivery: which cards were emailed to which address, delivery status, bounces, complaints, and opt-outs.
• Integrations: your QRZ XML login, QRZ Logbook API key, and eQSL username and password, encrypted at rest, if you connect them. Your LoTW certificate and its password are used for one batch and discarded. They are never written to storage.
• Operational: standard web server logs, Cloudflare security signals, and error reports.

What we do not collect

We do not use advertising trackers. We do not sell, rent, or trade any data. We do not build profiles for anyone else. We do not read your logs for any purpose other than rendering and delivering your cards and the integrations you turned on.

Where it goes

• Cloudflare hosts the application, database, and file storage.
• Resend delivers email.
• Anthropic processes uploaded card artwork once per design to propose field positions and to screen for prohibited content. The image is not used to train models.
• The 3905 Century Club site at 3905ccn.org receives the callsign in your log, so your award numbers can print on your cards.
• QRZ receives the callsigns in your upload that have no email address, and your own callsign, so we can find the address that station published and fill in your details. We ask with our own QRZ login. We keep a looked-up address for 90 days and never show it to you. QRZ receives QSO inserts only if you connected your QRZ account.
• LoTW receives signed QSOs only if you supplied a certificate for that batch.
• eQSL receives your contacts only if you connected your eQSL account.
• NetLogger is queried for public net check-in lists only when you import from a net. We keep only callsign, name, state, grid, and member id from those lists.

How long we keep it

Guest uploads, guest cards, and guest PDFs are deleted automatically 24 hours after creation. Account data is kept until you delete the item or the account. Deleting your account removes your logs, designs, cards, and integration secrets within 24 hours. Delivery records are kept in anonymized form for abuse prevention. Opt-outs are kept indefinitely because that is what makes them work.

Recipients of cards

If someone used QSL.now to send you a card, we hold your callsign and the email address they supplied or that QRZ published, plus the card itself, so the claim link works. You can opt out of all future QSL.now email at the link in any message, and you can ask us to delete the cards addressed to you at support@qsl.now.

Security

Passwords are hashed with PBKDF2. Integration secrets are encrypted with a key that is not stored in the database. Uploaded images are re-encoded and stripped of metadata before storage. Access to production systems is limited to the operator.

Your rights

Email support@qsl.now to see, correct, export, or delete your data. We answer within a reasonable time and without charge.

Children

QSL.now is not directed at children under 13 and we do not knowingly collect their data.

Changes

Changes are posted here with a new effective date. Material changes are emailed to account holders.