SlabCheck ("we," "us," or "our") operates the SlabCheck mobile application and website at slabcheck.vercel.app. This policy describes what data we collect, how we use it, and your rights.
When you create an account, we collect your email address and an optional display name. We use email/password authentication through Supabase. We do not support social login (Google, Apple, etc.) at this time.
When you scan or search for cards, we store card metadata (name, set, rarity, images) in a shared cache. Your personal collection (which cards you've saved, condition notes, price snapshots) is stored in your private account.
The app requests camera permission to scan Pokemon cards. Photos are captured temporarily on your device for card identification and are not stored permanently. We do not access your photo library.
We do not directly collect or store credit card numbers. Payments are processed by Stripe (web) and Apple/Google via RevenueCat (mobile). We store your subscription tier, status, and billing period dates — not your payment method details.
We track daily scan counts to enforce free-tier limits. We do not use analytics SDKs, tracking pixels, or behavioral profiling. We do not sell or share your data with advertisers.
If you connect your eBay account for listing cards, we store encrypted OAuth tokens to act on your behalf. These tokens are stored server-side only and are never exposed to the client app. You can disconnect your eBay account at any time.
We share limited data with the following services to operate SlabCheck:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication, database | Email, account data, collection data |
| Stripe | Web subscription payments | Email, subscription tier |
| RevenueCat | Mobile in-app purchases | User ID, purchase events |
| Vercel | Hosting and serverless API | Request logs (IP, user agent) |
| eBay | Card listing (opt-in) | Card details, photos, pricing |
| TCGdex | Card data lookup | Search queries (card names) |
| PokemonPriceTracker | Graded card pricing | Card name, set name |
Each service has its own privacy policy. We encourage you to review them.
We retain your account data for as long as your account is active. Cached card and pricing data may be retained for performance purposes. If you delete your account, your personal data (profile, collection, listings, subscription, scan history) is permanently deleted. Shared card cache data is not affected by account deletion.
You may:
If you are a California resident, you have additional rights under the CCPA. Contact us to exercise them.
SlabCheck is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.
The SlabCheck mobile app does not use cookies. Our website uses only essential cookies required for Stripe checkout sessions. We do not use advertising or tracking cookies.
We may update this policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, through the app. Continued use of SlabCheck after changes constitutes acceptance of the updated policy.
For privacy questions or data requests:
support@slabcheck.app