Privacy Policy

We use information to:

• operate and maintain the marketplace
• create and manage accounts
• publish and manage listings
• enable offers and negotiations
• connect buyers and sellers
• enable marketplace messaging
• facilitate optional sharing of shipping information
• verify seller identities
• match PSA certification information
• provide SlabGeek Est. Value and SlabScore features
• send notifications and transactional emails
• detect fraud, spam, abuse, and security threats
• investigate reports and disputes
• enforce our Terms of Service and Marketplace Policies
• understand marketplace activity and improve SlabGeek
• measure the performance of our advertising on Meta platforms
• comply with legal obligations

SlabGeek does not currently process new marketplace payments, hold funds, or provide escrow. Buyers and sellers arrange payment directly. Records of orders previously paid through SlabGeek’s checkout are kept as described above.

Other SlabGeek users

Public marketplace information may include your username, seller verification indicator, member-since date, active listings, reported sales count, transaction feedback, listing photographs, card and listing details, and asking prices.

Your email address, identity verification information, and saved shipping addresses are not public. A shipping address is shared with a seller only when the buyer chooses to share it through the transaction flow.

Service providers

We share information with vendors that provide services necessary to operate SlabGeek:

• Lovable Cloud, which provides our hosting, database, file storage, and authentication infrastructure
• Stripe, for seller identity verification through Stripe Identity and, for orders previously placed through SlabGeek’s checkout, payment processing, refunds, and disputes
• Resend, for delivery of certain marketplace emails
• Google, when you choose to sign in with Google
• Meta Platforms, which receives advertising measurement events as described below
• X Corp., which receives advertising measurement events as described below
• PSA, which receives certification numbers we look up to match certification information

Card and market data services we use to display card images and pricing receive card identifiers only, not your personal information.

Legal and safety disclosures

We may disclose information where reasonably necessary to comply with law, legal process, or lawful government requests; protect users; investigate fraud or abuse; enforce our agreements; and protect SlabGeek’s rights, property, and security.

Business transfers

Information may be transferred in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of SlabGeek’s business or assets, subject to applicable law.

SlabGeek does not sell personal information for money. We do use the Meta Pixel and Meta Conversions API to measure our ads on Facebook and Instagram. Under some state laws, including California law, this may be considered “sharing” personal information for cross-context behavioral advertising.

Advertising measurement (Meta)

When you visit SlabGeek, the Meta Pixel runs in your browser and SlabGeek’s servers also send matching events to Meta. These events include page views, card and listing page views, Marketplace searches, account creation, starting to sell, a successful PSA lookup, publishing a listing, submitting an offer, accepting an offer, and starting a conversation with a seller.

Events can include the page address, your IP address, browser information, Meta browser identifiers (the _fbp and _fbc cookies), campaign tags from the link you arrived through, and basic listing details such as a listing ID, card name, set, card number, PSA grade and price. For account-related events, we also send a one-way hashed (SHA-256) version of your email address and SlabGeek user ID. Page view and search events do not include your email or user ID.

Advertising measurement (X)

We use the X (Twitter) pixel and X Conversion API to measure our ads on X. Events sent are page visits, account creation, publishing a listing and completed purchases (with order value). They can include your IP address, browser details, the X click ID (twclid) from the ad link you arrived through, and a one-way hashed (SHA-256) email for account, listing and purchase events. Visitors in the EU, UK and Switzerland are asked first, and X and Meta tracking run only if they accept; elsewhere it runs unless you opt out. Change your choice anytime via Cookie settings in the footer, or turn on Global Privacy Control. Your choice, its time and the notice version are stored in your browser. X’s use of this data is governed by X’s privacy policy.

We never send Meta your password, sign-in tokens, messages, shipping addresses, identity verification information, seller slab photographs, or PSA certification numbers.

To opt out, turn on Global Privacy Control in your browser; SlabGeek then does not load the Meta Pixel or send these events. You can also email hello@slabgeek.com to opt out. Meta’s own use of this data is governed by Meta’s privacy policy.

SlabGeek uses browser storage only for functionality:

• authentication: your signed-in session is kept in your browser’s local storage so you stay signed in
• preferences: small settings, such as which tab you last viewed on the Offers page

SlabGeek uses Meta advertising cookies (such as _fbp and _fbc) set by the Meta Pixel to measure ads, unless you have Global Privacy Control turned on. We also remember the campaign tags (utm parameters) from the first link you arrived through, in your browser’s local storage, and may save them to your account and listings to understand which campaigns bring new sellers. Our hosting provider may use strictly necessary technologies for security and reliability.

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts and marketplace records, prevent fraud, resolve disputes, enforce agreements, and comply with legal obligations. Different categories of information may be kept for different periods.

Temporary links to private seller photographs expire after a short period. Other retention periods have not yet been set. If you close your account, we may keep certain information where reasonably necessary for fraud prevention, security, legal compliance, disputes, transaction records, or backups.

SlabGeek uses reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls on our database and private storage for seller photographs and shipping addresses.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• Account and profile: you can update your username and account settings in your dashboard.
• Notifications: you can manage email notification preferences in your dashboard settings.
• Shipping address: you can edit your saved shipping address in your dashboard.
• Account deletion: SlabGeek does not currently offer self-service account deletion. To request deletion, email hello@slabgeek.com.
• Access and correction: to request access to or correction of your personal information, email hello@slabgeek.com.

We may need to verify your identity before completing a request.

California residents may have certain privacy rights under applicable California law. Where those rights apply to SlabGeek, we will honor verified requests as required by law. These may include the right to know and access personal information, the right to correct it, the right to delete it, the right to opt out of the sale or sharing of personal information, the right to limit certain uses of sensitive personal information, and the right not to be discriminated against for exercising these rights.

To make a request, email hello@slabgeek.com. You may use an authorized agent where permitted by law.

Identity verification and shipping information may involve sensitive personal information. We use it only for seller verification, marketplace safety, fraud prevention, completing transactions, and legal and security requirements.

Identification documents and verification images are collected and processed by Stripe. SlabGeek itself stores only verification status information, saved and shared shipping addresses where you provide them, and order records for purchases previously made through SlabGeek’s checkout.

SlabGeek’s marketplace is intended for adults. You must be at least 18 years old to buy or sell through SlabGeek, consistent with our Terms of Service. We do not knowingly collect personal information from children through accounts intended for marketplace transactions.

If you are a parent or guardian and believe a child has provided personal information to SlabGeek, contact hello@slabgeek.com and we will take appropriate steps to delete it.

SlabGeek may link to or integrate with third parties such as PSA, Stripe, Google, and payment services that buyers and sellers independently choose. Their privacy practices are governed by their own policies, and SlabGeek is not responsible for them.

SlabGeek is operated from the United States. Information may be processed and stored in the United States or other locations where our service providers operate.

We may update this Privacy Policy as SlabGeek evolves. When we make material changes, we will update the “Last updated” date and provide additional notice where required by law.

Questions or privacy requests may be sent to:

SlabGeek LLC

hello@slabgeek.com