Privacy Policy

What we collect

Your email address

To send you sign-in links and to tell your account apart. It is never shown to anyone.

Your handle

Your public name on Slab, shown on your page and with your slabs.

Your slabs

What you enter about each slab: grader, cert number, grade, card name, set, card number and language, and whether it matched the grader's records.

Your notes and acquired dates

Kept private: only you can see them.

Your photos

The photos of your slabs you upload. Before uploading, your browser removes the hidden data photos carry, including where they were taken.

Usage counts

How many photos you uploaded and certs you looked up in the last day, to enforce daily limits. Deleted after a day.

Technical logs

The services that host Slab record requests, such as IP address, browser and time, to keep it running and secure. They keep these for a limited time.

What's public

Slab is a place to show your collection. Your handle, your slabs' details and their photos can be seen by anyone, including people who aren't signed in, and may appear in search results. Your email address, notes and acquired dates are never shown to anyone else.

How we use it

Only to run Slab: to sign you in, show your collection, enforce limits, keep the service secure, and write to you about your account. We don't sell or rent your personal information, we don't show ads, and we don't share it with anyone for advertising.

Cookies

Slab uses only the cookies it needs to keep you signed in. There are no advertising or tracking cookies, and no analytics.

Who helps us run Slab

Supabase

Stores your account, collection and photos, and handles sign-in. Its servers are in Oregon, in the United States.

Vercel

Hosts the website.

Resend

Delivers sign-in emails.

Cloudflare

Runs our domain, and forwards email sent to us.

PSA

When cert lookups are available, receives the PSA cert number you entered, and nothing about you.

They use your information only to provide their service to us. Your information is stored in the United States.

How long we keep it

As long as your account exists. Removing a slab deletes it and its photos. Deleting your account, from the Account page, deletes your photos and everything else about you from Slab at once. Copies can remain in our providers' backups for a short time before they are overwritten.

Your choices

You can see and change everything you've entered, download your collection as a spreadsheet from the Account page, remove any slab, change your handle, and delete your account at any time. Wherever you live, you can also ask us what we hold about you, or ask us to correct or delete it, by writing to hello@keepslabs.com. We'll answer within 30 days.

Do Not Track

Slab doesn't track you across other sites, so it works the same whether or not your browser sends a Do Not Track signal.

Children

Slab is not for children under 13. If we learn that someone under 13 has an account, we delete it. If you're a parent and think your child has signed up, write to hello@keepslabs.com.

Security

Everything travels over encrypted connections, photos are stored privately and shown through links that expire, and access to your data is limited to what's needed to run Slab. No system is perfectly secure, but we work to protect yours.

Changes

If this policy changes, we'll update the date at the top. For significant changes, we'll let you know by email or on Slab before they take effect.

Contact

Jordan Ramos, California. hello@keepslabs.com