1. Who we are
This policy is issued by E-Card Cutter (“we”, “us”), which runs the website ecardcutter.com. E-Card Cutter is a browser-based utility that helps you crop official Indian identity and scheme cards from PDFs you already have, so they print at pocket size.
We are not a government agency and we do not issue Aadhaar, PAN, Voter ID, or any other identity document. We are a data fiduciary only for personal data we actually process. The cropper is designed so that your ID file is not one of those datasets.
2. The short version
- Choosing a PDF in the cropper does not send that file to E-Card Cutter. Cropping, saving and printing all happen on your device.
- Passwords typed to open a locked PDF are used in your browser to unlock that file. They are not submitted to us.
- Names, numbers, photos, and other details printed on the card are not transmitted to us by the cropper.
- Fonts, the tutorial video and error reports come from other services (Google, YouTube, Sentry), like on most websites.
3. How the cropper handles your documents
When you use a crop page, your browser reads a PDF you select from storage on your device (the system file picker, or a file you drop onto the page). On-device AI then looks at the pages, finds the card, and prepares a print-ready image. Editing, saving, and printing also happen in that tab.
That flow does not post the file to E-Card Cutter. There is no account drive where a card could be stored with us, and we cannot open, copy, or recover a PDF you cropped, because it is not sent to us.
Optional crop reports. Under each cropped card is a Report button. It opens a small window where you can send us a crop report, so we can see what went wrong and improve the cropper for that kind of card. Nothing is sent unless you press Send report. A report contains:
- the PDF you cropped, as it is, and the cropped card as the app showed it;
- the time, the problem you picked (if any), which card page of this site it came from, and, for a password-protected PDF, its password, so we can open it.
Your file name is not sent. The whole report is encrypted on your device so that only E-Card Cutter can open it. Reports are kept in our storage on Google Cloud (Cloud Storage for Firebase), seen only by the people who work on E-Card Cutter, used only to improve cropping, and deleted within 30 days. Cropping, saving and printing never send your file, its password or anything printed on it; a report is the only way a document reaches us, and only when you send one.
The print list. Cards you add to the print list, the PDFs they came from and where each card was cropped are kept in your browser's own storage on this device (IndexedDB), so the list is still there as you move between the crop pages of this site or close and reopen the tab. Nothing in it is sent to us. If a PDF needed a password, the password is kept with it so the card can be reopened without asking again; it is stored encrypted (AES-GCM) under a key your browser generates and does not let any script read out. That protects it from being read directly out of storage; it does not protect it from someone who can use this browser as you. The list, with its PDFs and passwords, clears itself one hour after its last change, so on a shared computer nobody's cards wait for the next person. You can also press Clear in it, or clear this site's data in your browser settings.
Libraries that the page loads so it can open PDFs and run the on-device AI are ordinary program code. They are fetched as software, not as a channel that carries your file to our servers.
4. What we do not receive from your documents
When you crop, save or print, E-Card Cutter does not receive:
- the PDF file itself;
- the password used to open a locked PDF;
- images of the pages, or the cropped card;
- identity data printed on the document (name, photograph, Aadhaar or PAN number, address, QR codes, and similar); or
- the filename, which can itself contain a person’s name.
The only exception is a crop report you choose to send, described in section 3.
If you later send us a screenshot or a file yourself — for example in a help chat — that is a message you chose to send, not an automatic upload from the cropper. Only send what you are comfortable sharing.
5. Information collected when you visit the website
Loading any page on this site is a request to the computers that host it: Firebase Hosting, run by Google, and its content network. Those systems typically record technical logs such as:
- IP address;
- date and time;
- the URL requested, and sometimes the referring page;
- browser and device type; and
- success or failure of the request.
The host keeps these logs; we do not routinely look at them, and would use them only to keep the site running and secure. It is the ordinary log of a public site. It is not a copy of an ID document.
If you contact us (for example through the published Telegram group), we process whatever you choose to write, so we can reply.
7. Third-party services we do not control
Pages on this site may load software and media from other companies so the product can run. Examples include:
- web fonts (such as Google Fonts);
- public content-delivery networks that host the libraries used to open PDFs and run on-device AI in your browser;
- embedded video: the tutorial's preview image comes from YouTube, and its player (youtube-nocookie.com) loads when you press play;
- hosting and the content network that deliver the website itself (Firebase Hosting, by Google);
- measurement tools: Sentry, for error reports (section 8), and Google Analytics, for how the site is used.
Each of those parties has its own privacy policy. When their code runs, they may collect the kinds of technical information they describe — typically about the visit, not an ID file sitting only in your tab.
8. Diagnostics
If the cropper fails, a technical error report may be sent to Sentry, the service we use to collect them, so we can fix the product. We configure those reports so they do not include the document, page images, the filename, or the password.
A report may include an error message, where in the code it happened, which page of this site you were on, browser and device type, and coarse facts about the job (for example how many pages were open). That is ordinary product telemetry. It is not a copy of your card.
A tracker blocker may prevent a report from leaving the browser. The cropper is still meant to work in that case.
9. How we use information
We use information we actually have for these purposes:
- to provide, maintain, and secure the website and the cropper;
- to understand aggregate use of the pages (which cards people open, whether the site is healthy);
- to diagnose faults; and
- to reply if you contact us.
We do not use your ID documents, because we do not receive them from the cropper. A crop report you choose to send is used only to improve cropping, and is deleted within 30 days. We do not use visit data to rebuild the contents of a card you cropped.
11. Retention
- Document files, passwords, and card images — not retained by us; they are not received from the cropper.
- Website logs — kept only as long as needed to operate and secure the site, then deleted or aggregated.
- Diagnostics — kept long enough to find and fix the fault.
- Messages you send us — kept as long as needed to help you and to keep a record of the conversation.
12. Security
The cropper’s main protection is architectural: E-Card Cutter does not take delivery of the file. We also use ordinary hosting safeguards for the website itself.
No method of transmission or processing is perfectly secure. You are responsible for the device, browser, extensions, and network you use. If you believe there is a vulnerability in our pages, contact us using the details below.
13. Children
The service is intended for adults who need to print official documents they are entitled to hold. We do not direct the cropper at children, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data in a message, contact us and we will delete it where we hold it.
14. Your rights
If you are in India, you are a Data Principal under the Digital Personal Data Protection Act, 2023, for personal data we process. Depending on the law that applies to you (including Indian, EU, UK, or other rules), you may have the right to:
- know whether we process your personal data, and to access it;
- correct inaccurate data;
- erase data we hold, subject to legal exceptions;
- withdraw consent, where processing is based on consent, as easily as it was given;
- nominate another person to exercise rights in case of death or incapacity, where that mechanism exists; and
- complain to the Data Protection Board of India, or to another supervisory authority that has jurisdiction over you.
Because we do not receive your ID files from the cropper, there is no document file on our side to access or delete.
To make a request about information we might hold from a site visit or from a message you sent, use the contact details below. We may need to verify that the request is yours. We will not ask you to upload an identity PDF through the cropper in order to exercise these rights.
15. International visitors
The site is offered from India. If you visit from another country, information about that visit may be processed in India and in the countries where our host, content network, font, measurement, or library providers operate. Those countries may have different data-protection rules from your own.
16. Changes
We will change this page when our practices, the law, or the services on the site change. The date at the top is the latest revision. The updated policy applies to later use of the site. If a change is material, we will make that clear on this page.
17. Contact
E-Card Cutter
Website: https://ecardcutter.com
Telegram: telegram.me/chat_ecardcutter
Email: contact@ecardcutter.com
This policy: https://ecardcutter.com/privacy.html
For privacy questions, requests about your information, or complaints, write to contact@ecardcutter.com.
This page describes our practices. It is not legal advice, and it is not a contract that guarantees the behaviour of third-party software. Governing law: India.