Botcard is a static set of pages and JSON files. There is no account, no cookie set by the site, and no payment form.
The web server writes an access log: time, IP address, path, status, and user agent. That log is used to see whether the site is up and which cards are fetched. It is not sold. It is not a marketing list.
Do not send personal data to Botcard. Nothing on the site asks for it. Lookup URLs contain a token id such as gptbot, not a person's name.
tools/call with name check_robots at POST /mcp, and POST /v1/robots-check, read the robots.txt text in the request, compare it in memory, and discard it. That text is not written to disk. The access log records the path, time, IP address, status, and user agent. It does not record the body.
Payments are not open. A contact address will be added before any payment is taken.