Privacy policy

Summary

• You can browse listings without an account.
• With an account we store your email, saved items, collection entries and watches.
• We don’t sell personal information, show ads or use advertising trackers.
• Purchases happen on marketplaces, so we never receive your payment or shipping details.
• You can delete your account at any time.

Information we collect

Information you provide

• Email address, to send single-use sign-in codes and manage your account.
• Saved listings: the marketplace listing IDs you save.
• Collection entries you choose to record, such as card name, set, number, grader, grade, certificate number and the price you paid.
• Watches: the cards, grades, marketplaces and price limits you choose, and the alerts we generate for them.
• Support messages you send us.

Information collected automatically

• Push notification token and device platform (iOS or Android), if you allow notifications.
• IP address, used briefly to rate-limit searches and prevent abuse. We store a one-way keyed hash rather than the address itself.
• Basic technical logs (request time, error codes) kept by our hosting providers for security and reliability.

Photos you scan

When you use Scan, the photo is sent to our card-recognition service, analysed, and discarded. We do not store scan photos.

How we use information

• To provide the app: sign-in, syncing saved items and collections, and running your watches.
• To send in-app alerts and, if you allow them, push notifications.
• To keep SlabPal secure, prevent abuse and fix problems.
• To answer your support requests.

We do not use your information for advertising, and we do not sell or share it for cross-context behavioural advertising.

Service providers and marketplaces

We use service providers to run SlabPal. They process data only on our instructions:

• Supabase: database, authentication and server functions.
• Render: background processing for watches and alerts.
• Expo, Apple Push Notification service and Firebase Cloud Messaging: delivering push notifications.
• Email delivery provider: sending sign-in codes.

Marketplaces. When you open a listing, you leave SlabPal for that marketplace (for example eBay or Collector Crypt), whose own privacy policy applies. eBay links may include an affiliate identifier, so SlabPal may earn a commission; this does not change your price.

Listing analysis. To match public marketplace listings to catalog cards, we may send listing titles (never your personal information) to an AI text-classification provider.

We may also disclose information if required by law or to protect the rights and safety of our users or others.

How long we keep data

• Account data, saved items, collection entries and watches: until you delete them or your account.
• Alert inbox entries: up to 90 days.
• Push tokens: until you sign out on that device, disable notifications, or delete your account.
• Rate-limit records and technical logs: a short period, generally under 30 days.

Your choices and rights

• Access and correction: view and edit your saved items, collection and watches in the app, or email us.
• Deletion: delete your account in the app or on the web.
• Notifications: turn push notifications off in your phone’s settings or per watch.

Depending on where you live (for example California or the EU/UK), you may have additional rights to access, correct, delete or port your data, or to object to processing. Email us to exercise them; we won’t discriminate against you for doing so.

Security

Data is encrypted in transit (HTTPS). Sign-in sessions are stored in your phone’s secure Keychain or Keystore. Access to our systems is restricted and requires multi-factor authentication. No system is perfectly secure, so please contact us if you believe your account has been compromised.

Children

SlabPal is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

International users

SlabPal is operated from the United States, and data is processed in the United States by us and our service providers.

Changes to this policy

We’ll post updates here and change the “Last updated” date. If a change is significant, we’ll also tell you in the app.

Contact

SlabPal, Tampa, Florida, USA. support@slabpal.com