Privacy policy

Last updated: 31 August 2026

Cards Against Humanity (“Cards Against Humanity”, “Company”, “us”, or “we”) operates the Monument Design Committee Store and website, including all related information, content, features, tools, and products, in order to provide you, the customer, with a curated shopping experience (the “Store”). The Store is powered by Shopify, which enables us to provide the Store to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Store or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any part of the Store, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Personal Information We Collect or Process

When we use the term “personal information,” we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Store, where you live, and as permitted or required by applicable law:

Contact details including your name, address, billing address, shipping address, phone number, and email address.
Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
Account information including your username, password, security questions, preferences, and settings.
Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange, or cancel, and your past transactions.
Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information including information regarding your interaction with the Store, including how and when you interact with or navigate the Store.

2. Personal Information Sources

We may collect personal information from the following sources:

Directly from you, including when you create an account, visit or use the Store, communicate with us, or otherwise provide us with your personal information;
Automatically through the Store, including from your device when you use our products or visit the Store, and through the use of cookies and similar technologies;
From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf; and
From our partners or other third parties.

We use pixel tags or web beacons, which are transparent graphic images placed on a web page or in an email that indicate a page or email has been viewed or tell your browser to get content from another server. We may share your information with Google and Meta through Google and Meta pixels to serve our advertisements to users who later visit sites within Meta’s and Google’s ad networks. We also provide your email address to Google and Meta to create look-alike audiences on their platforms.

If you do not want your information to be shared with third parties, please opt out using the Do Not Sell My Personal Information link that is available on the Store.

3. How We Use Your Personal Information

Depending on how you interact with us and which parts of the Store you use, we may use your personal information for the following purposes:

Completing and delivering your orders. We use your personal information to process and fulfill your orders, take and process payments, arrange shipping and delivery, send you order confirmations and shipping updates, and handle returns, exchanges, and cancellations.
Managing your account. We use your personal information to create, maintain, and manage your account, save your preferences and items you are interested in, let you post reviews, and send you notifications about your account.
Providing customer support. We use your personal information to respond to your questions and requests, provide customer service, and stay in touch with you about your orders and our business relationship.
Personalizing your shopping experience. We use your personal information to remember what you like, recommend products related to your purchases and browsing, and improve the Store.
Marketing and advertising. We use your personal information to send you marketing and promotional messages by email, text message, or mail (where permitted), and to show you online ads for our products—including based on items you have purchased, added to your cart, or otherwise engaged with. You can opt out of marketing at any time (see “Your Rights and Choices”).
Security and fraud prevention. We use your personal information to keep your account and the Store secure, provide a safe payment and shopping experience, and detect, investigate, and prevent fraud or other harmful or unlawful activity. You are responsible for keeping your login details safe, and we recommend that you do not share your username or password with anyone.
Legal and compliance. We use your personal information to comply with applicable law, respond to valid legal requests (including from law enforcement or government agencies), participate in legal proceedings, and enforce our terms and policies.

4. How We Disclose Personal Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

Because we use Shopify and other partners to support personalized advertising based on your activity across different merchants and websites, our disclosures of personal information for those purposes may constitute a “sale” and/or “share” under applicable law. You have the right to opt out of these disclosures as described in the “Your Rights and Choices” section below.

We may disclose your personal information in the following circumstances:

Service providers. With vendors and other third parties who perform services on our behalf—such as payment processing, order fulfillment and shipping, IT and cloud hosting, data analytics, customer support, and marketing—who are contractually required to keep your information confidential and use it only to provide those services to us.
Shopify. With Shopify, which powers the Store and processes personal information to provide, secure, and improve the Store (see “Relationship with Shopify” below).
Advertising and marketing partners. With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising based on your activity across different merchants and websites. These partners use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to opt out of this sharing for targeted advertising, as described in “Your Rights and Choices.”
At your direction or with your consent. When you ask or authorize us to share your information—for example, to ship you products, or through your use of social media widgets or login integrations.
Affiliates. With our subsidiaries, affiliates, and others within our corporate group.
Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, dissolution, or other sale or transfer of some or all of our assets, in which personal information about users of the Store may be transferred.
Legal, safety, and enforcement. To comply with applicable law and respond to valid legal process (such as subpoenas, warrants, or requests from law enforcement or government agencies); to enforce our Terms of Service and this Privacy Policy and investigate potential violations; and to protect the rights, property, or safety of the Store, our users, or others, or to defend against legal claims.
Aggregated or de-identified information. We may share aggregated or de-identified information that cannot reasonably be used to identify you, without restriction.

You must notify us immediately of any suspected or actual unauthorized use of your customer information, and of any and all other security breaches.

5. Relationship with Shopify

The Store is hosted by Shopify, which collects and processes personal information about your access to and use of the Store in order to provide and improve the Store for you. Information you submit to the Store will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Store for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with the Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with the Store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over the use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information at the Shopify Privacy Portal.

6. Third-Party Websites and Links

The Store may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Store and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Store.

7. Children’s Data

The Store is not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. We do not knowingly “sell” or “share” (as those terms are defined in applicable law) the personal information of consumers we know to be under 16 years of age without affirmative authorization (opt-in consent).

8. Security of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including to provide you with the Store, maintain your account, complete transactions, and comply with our legal, tax, accounting, and regulatory obligations.

How long we retain your personal information depends on factors such as whether we need the information to maintain your account, to provide you with the Store, to comply with legal obligations, to resolve disputes, or to enforce other applicable contracts and policies. We determine the appropriate retention period for each category of personal information based on the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and applicable legal, tax, accounting, and regulatory requirements.

When we no longer need to retain your personal information, we will delete, de-identify, or aggregate it in accordance with applicable law. Where deletion is not immediately possible (for example, because the information is stored in backup archives), we will securely store your personal information and isolate it from further processing until deletion is possible.

10. Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

Right to Access / Know. You may have a right to request access to personal information that we hold about you.
Right to Delete. You may have a right to request that we delete personal information we maintain about you.
Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
Right to Opt Out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may have a right to opt out of the “sale” or “share” of your personal information or to opt out of the processing of your personal information for purposes considered to be “targeted advertising,” as defined in applicable privacy laws. You can exercise your right to opt out of those uses here, or by using the Do Not Sell My Personal Information link available on the Store. Please note that if you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt out for the device and browser that you use to visit the website. If we are able to associate the device sending the signal with a Shopify account, we will apply the opt-out request to the account as well. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/. Other than the Global Privacy Control, we do not recognize other “Do Not Track” signals that may be sent from your web browser or device.
Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on the Store or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof that you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Your California Privacy Rights (CCPA/CPRA). The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020, effective January 1, 2023 (“CPRA”), and some other state privacy laws provide consumers with specific rights regarding their personal information. This section describes your rights and explains how to exercise those rights.

Right to Know What Information We Collect, With Whom We Share Your Information, and the Right to Data Portability. You may request that we disclose to you the categories of personal information we collect about you, the categories of sources from which we collected that personal information, the categories of personal information we sold or disclosed, our business or commercial purposes for collecting and selling such personal information, the categories of third parties with whom we shared such personal information, and the specific pieces of personal information we collected about you over the past 12 months.
Right to Request Deletion of Your Information. You may request that we delete some or all of the personal information we maintain about you, subject to certain exceptions. If we cannot delete your personal information, we will give you a reason why we cannot do so. For security reasons, you or your authorized agent may be asked to verify your/their identity. Note that some personal data may be retained as permitted by law (for example, to comply with legal obligations or to prevent fraud). We will delete or de-identify personal information not subject to certain exceptions from our records and will direct our service providers to take similar action.
Right to Opt Out of the “Sale” or “Sharing” of Your Personal Information. For purposes of this Privacy Policy, “sell” means the disclosure of your personal information to a third party for monetary or other valuable consideration, and “share” means the disclosure of your personal information to a third party for cross-context behavioral advertising, in each case as defined in and subject to the exceptions set forth in the CCPA and other applicable state privacy laws. Because we use Shopify and other partners to support personalized advertising based on your activity across different merchants and websites, our disclosures of personal information for those purposes may constitute a “sale” and/or “share” under applicable law. You have the right to opt out of these disclosures by using the Do Not Sell My Personal Information link available on the Store or by visiting https://privacy.cah.io/opt-out.
Right to Correct Inaccurate Personal Information. Taking into account the nature of the personal information and the purposes of the processing, this right provides you with the ability to seek to correct or update personal data that you consider we hold about you.
Right to Limit Use of Sensitive Personal Information. The CCPA gives California residents the right to limit our use and disclosure of “sensitive personal information” to purposes specified in the CCPA. We collect certain sensitive personal information, such as account log-in credentials and financial account information, in order to provide the Store, process transactions, secure your account, and prevent fraud. We do not use or disclose sensitive personal information for purposes that would trigger the right to limit (for example, we do not use it to infer characteristics about you), and therefore we are not required to offer a “Limit the Use of My Sensitive Personal Information” option. If our practices change, we will update this Privacy Policy and provide the required opt-out mechanism.
Right of Non-Discrimination and Non-Retaliation. This right prohibits (a) denying you access to or use of goods and services, (b) charging different prices or rates for those goods and services, and/or (c) providing a different level or quality of those goods or services, as a result of your exercising any right under any data protection and privacy laws and/or regulations. We will not discriminate against you because you made any of these requests. We will not: (i) deny you goods or services; (ii) charge you different prices or rates for those goods or services, including through granting discounts or other benefits, or imposing penalties; (iii) provide you a different level or quality of our goods or services; or (iv) suggest that you may receive a different price or rate for our goods or services or a different level or quality of our goods or services.

In addition to the rights available to residents of California, other state privacy laws may guarantee the rights to:

Opt out of the processing of your personal data for the purposes of targeted advertising and for profiling in furtherance of decisions—including, for residents of Connecticut, solely automated decisions—that produce legal or similarly significant effects; and
Appeal any decision or indecision related to the exercise of any right the consumer is granted under the applicable state law.

11. How to Exercise Your Rights

If you would like to exercise any of these rights, please contact us:

Calling us at (800) 942-4410;
Emailing us at privacy@cardsagainsthumanity.com;
Filling out the contact form available at https://privacy.cah.io/contact; or
Writing to us via postal mail at PO Box 316620, Chicago, IL 60631, United States.

We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations.

Your request must:

Provide sufficient information for us to reasonably verify that you are the person about whom we collected personal information, or an authorized representative of such person; and
Describe your request with sufficient detail for us to properly understand, evaluate, and respond to it.

If you wish to submit a request on behalf of another individual, we will also need sufficient information to verify that the individual is the person about whom we collected personal information and that you are authorized to submit the request on their behalf. For requests to know, access, correct, or delete personal information, we may ask you to provide sufficient evidence to show that the individual has provided the authorized agent signed permission to act on their behalf, that you have verified your own identity directly with us pursuant to the instructions set forth in this Privacy Policy, and that you have directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf.

We may retain personal information as permitted by law, such as for tax or other record-keeping purposes, to maintain an active account, to process transactions and facilitate customer requests, and/or to protect against fraud and other misuse of the Store. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information.

Shine the Light. California’s “Shine the Light” law (Civil Code Section 1798.83) permits users of the Store who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@cardsagainsthumanity.com or write to us at: Cards Against Humanity Legal Department, PO Box 316620, Chicago, IL 60631.

Response Timing and Format. We will confirm receipt of your request to know, correct, delete, and/or seek any request under the relevant U.S. state privacy law(s) within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us at privacy@cardsagainsthumanity.com. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of receipt. If we require more time (up to another 45 days), we will timely inform you of the reason(s) and extension period in writing. We may choose to verify your identity before responding to any such request.

For requests to know, the disclosures we provide will generally cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.

12. Laws in Other Countries

We comply with United States privacy laws and regulations. We do not represent that the Store is governed by, or operated in accordance with, the laws of other nations or jurisdictions, or that the Store or any portion of it is appropriate or available for use in any particular location. If you choose to access the Store, you do so at your own risk, and you are responsible for complying with all local laws, rules, and regulations. By using the Store, visitors from outside the United States acknowledge and agree that the Store is subject to United States laws and regulations, and waive any claims against us that may arise under their own national laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the “Last updated” date, and provide notice as required by applicable law.

14. Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at (800) 942-4410 or privacy@cardsagainsthumanity.com, or contact us at PO Box 316620, Chicago, IL 60631, United States.

If you need to access this Privacy Policy in an alternative format due to having a disability, please contact privacy@cardsagainsthumanity.com or (800) 942-4410.