Privacy Policy
Last updated October 25, 2026
What we collect
- Your email address, to sign you in and to send sign-in codes, a welcome email and membership emails.
- What you enter about your cards: listings you mark, slabs in your Vault, what you paid, where a slab is, grades that came back, sales and settings. This is private to your account: other members never see it.
- Membership status from Stripe: your plan, when it renews, and Stripe's customer and subscription IDs.
- Basic technical data needed to run and protect the site, such as IP address and request logs, kept by our host.
What we don't collect
No passwords (sign-in is by emailed link or code). No card numbers: payment details are entered on Stripe's own page and stay with Stripe. No advertising trackers.
Cookies
One sign-in cookie keeps you signed in on a device for up to 30 days. Cloudflare Turnstile, which blocks bots on the sign-in page, may set its own cookie.
Who processes your data
- Cloudflare hosts the site and its database and protects it from attacks.
- Stripe handles payments and receipts.
- Resend sends our emails.
We share data with these services only so they can do that job. We never sell or rent your data, and we share it with others only if the law requires it.
How we protect it
All traffic is encrypted (HTTPS). Account data is only readable by your signed-in account. Access to the site's systems is limited to its owner.
Keeping and deleting
We keep your data while your account is open. Email [email protected] to get a copy or to delete your account and its data; we answer within 30 days. Stripe keeps payment records as the law requires.
Changes
If this policy changes, the date at the top changes, and members are emailed about important changes.
Contact
Questions about this page, your account or a charge: [email protected].