With an air gapped device like a cold card, you sign partially signed bitcoin transactions via an SD card that gets physically transferred between the internet connected device that you created and partially signed the TX on, and the cold card to complete the signing with your keys. So the cold card never needs to be connected to even so much as a usb cable.