This Privacy Policy explains what data MyGreenCard collects, how we use it, and what rights you have. Last updated: January 1, 2026.
Data we collect
From all visitors
- IP address (anonymized to /24 within 30 days)
- Browser type and version
- Pages visited and referral source
- Approximate location (country and region only)
From account holders
- Email address
- Name (as provided)
- Password (hashed, never stored in plaintext)
- Country of birth (if you provide it)
- Forum posts and comments
- Saved tool calculations (only if you choose to save them)
From attorney match users
- Pathway type (e.g., EB-2 NIW, family-based)
- General location (state)
- Brief description of situation (the information you provide)
- Contact preferences
From quiz takers
Quiz answers stay in your browser by default. They are only transmitted to our servers if you explicitly opt to share them with an attorney for matching purposes.
How we use data
- Provide the service — show you content, save your account, deliver newsletter
- Match you with attorneys — only when you explicitly request matching
- Improve content — aggregate analytics on which guides are useful
- Prevent abuse — detect spam, fraud, harassment in the forum
- Comply with legal obligations — respond to lawful requests
What we do NOT do with data
- We do not sell personal data to advertisers, marketers, or anyone else
- We do not share data with attorneys without your explicit consent
- We do not use your immigration profile for targeted advertising
- We do not provide data to immigration enforcement agencies absent valid legal process
Cookies
- Essential cookies: Login session, language preference, theme preference. Required for the site to function.
- Analytics cookies: Aggregate visit data via privacy-respecting analytics. Opt out via the cookie banner.
- Advertising cookies: If served on free pages. Limited and clearly labeled. Opt out via the cookie banner.
Third-party services
- Stripe: Payment processing for donations and Pro subscriptions
- SendGrid: Newsletter and transactional email delivery
- Cloudflare: CDN, DDoS protection, performance
- Google Analytics: Optional, behind cookie consent
- AdSense: If served, behind cookie consent
Each third-party service has its own privacy policy governing data they receive.
Your rights
For all users
- Access: Request a copy of all data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated data
- Export: Receive your data in a portable format
- Objection: Object to specific uses of your data
EU/UK residents (GDPR)
- All rights above plus right to restrict processing
- Right to lodge complaint with supervisory authority
- Data Protection Officer: dpo@mygreencard.com
California residents (CCPA/CPRA)
- Right to know what personal information is collected, sold, or shared
- Right to deletion of personal information
- Right to opt out of sale of personal information (we do not sell — but right exists if we ever did)
- Right to non-discrimination for exercising rights
Data retention
- Account data: until you delete account, then 30-day grace period before permanent deletion
- Anonymized analytics: 26 months
- Newsletter subscriptions: until you unsubscribe
- Forum posts: indefinitely (anonymized if account deleted)
Children's privacy
MyGreenCard is not intended for users under 16. We do not knowingly collect data from children. Parents who become aware of children's data on the site should contact privacy@mygreencard.com for deletion.
Changes to this policy
Material changes notified via email to account holders 30 days before effective date. Non-material changes posted with updated date.
Contact
Privacy questions: privacy@mygreencard.com