Card privacy
The one-time reveal, what we never store, and how cards are funded.
Cards are the most sensitive thing the ghost makes for you, so they get the strictest handling. There's no secret sauce here — just a simple rule: we show you the card details once, and we don't keep the parts that matter at rest.
The one-time reveal
When you want to see a card's number, expiry, and CVV, the ghost sends you a single-use reveal link:
You ask to reveal
From your dashboard tap Reveal on a card, or ask the ghost in chat.
We mint a one-time token
The reveal page opens with a token that works once and expires quickly. Open it, add the card to Apple Pay / Google Pay or copy the number, and you're done.
It's gone after that
The link can't be reused. Need to see the card again later? Just reveal it again — a fresh one-time link.
Treat a reveal link like the card itself. It opens the full number and CVV, so don't forward it — if you need the details again, generate a new reveal.
What we never store
The full card number (PAN) and CVV are never stored at rest on our side. They live with the regulated card issuer; the reveal page fetches them just-in-time for that one view. What SpendGhost keeps is only what's needed to show you a card in your dashboard:
- The last four digits, brand (Visa/Mastercard), type, and status.
- The balance and original load amount.
That's it. No PAN, no CVV, no full magstripe data sitting in a database.
How cards are funded
Every card is funded straight from the balance you control, in USDC — there's no separate bank account, card-on-file, or KYC step. Issuing a card simply moves value from your balance onto the card:
- Prepaid Visa/Mastercard — your balance funds the card's load amount plus the fee.
- Gift cards — your balance pays the face value plus the fee, and you get the code.
Because there's no bank in the loop and no card tied to your name on file, spending through a SpendGhost card keeps the same no card, no bank, no trace posture as the rest of the product. See Privacy.
Cards are single-load — funded once when issued. When one runs out, you ask for a fresh card rather than topping up the old one, which also means a card's details never need to be re-shared.