Privacy
What SlabHeist collects, why, and how to see or delete it. We collect very little, and we never sell it.
- Your email address
- Only if you sign up
- When you signed up, confirmed or left
- Kept with your email
- Your IP address
- Not stored
- A network code that changes daily
- Kept, to stop floods
- Cookies
- None
- Cert numbers you check
- Not stored
- Selling your data
- Never
Items SlabHeist holds about a visitor. The sections below explain each one.
On this page
Visit counts
We count visits with PostHog in cookieless mode. It sets no cookies and stores nothing on your device. PostHog receives your IP address only to make a daily anonymous hash and does not store it. Before anything is sent, we remove query strings and ad click IDs from page addresses, so cert numbers in a checker link never reach it.
Besides page views, we count a few actions to learn what people use: a cert check (whether it matched and how many certs were checked, never the numbers), changes to sorting and filters, a sign-up, sharing a page, and links followed to other sites (the site and page only).
Cloudflare, which hosts the site, also runs Cloudflare Web Analytics on our pages. Its script counts page views and measures how fast each page loads. It sets no cookies and stores nothing on your device, and its reports carry the page address without the query string, so cert numbers in a checker link are not in them.
Checking a cert
The cert checker matches numbers in your browser against PSA's published list, which the page downloads. We do not store the numbers you check. If you open or share a checker link with cert numbers in it, those numbers are part of that web address, like any search link.
Email updates
If you sign up for case updates, we store:
- your email address;
- which updates you asked for: the whole case, or one card;
- the page where you signed up;
- when you signed up, when we sent the confirmation link, when you confirmed and when you left;
- a code for the network you signed up from, made fresh each day, used only to stop one connection from flooding the form. We never store your IP address.
Sign-up is double opt-in. We email you a confirmation link first and send nothing else until you click it. The time you click is our record of your consent. If you sign up before our email sending is switched on, we keep the sign-up and send the confirmation link once it is.
We use your address only to send updates about this case and the cards on the list. We do not sell it, rent it or share it for advertising. Emails come from updates@slabheist.com, and every one has an unsubscribe link that works in one click. When you leave, we keep your address marked as unsubscribed so it gets no more email. To have it removed completely, write to us.
Marketplace links
Card pages and lists link to searches on eBay, TCGplayer and Fanatics Collect, and some pages link to sealed packs on Amazon. When you follow one, that site may set its own cookies under its own privacy policy. Our Amazon links carry our Amazon Associates tag, so the marketplace can credit SlabHeist for a purchase. SlabHeist sets no cookie for this and never learns what you buy. Our visit counts note which marketplace a link pointed to, without its search words or IDs. You can clear or block those sites' cookies in your browser settings.
Do Not Track
Our PostHog code honors Do Not Track and Global Privacy Control. With either one on, it still loads but sends no page views or events from your visit. Cloudflare Web Analytics does not check these signals, so it still counts the page view and its load time, without cookies. Nothing on the site follows you to other websites.
Services we use
- Cloudflare hosts the site, stores sign-ups, sends our email and serves card images from our own image server.
- PostHog counts visits, in cookieless mode.
- Cloudflare Web Analytics counts page views and page load times, without cookies.
Fonts and card images load from our own domains. Links to PSA, news outlets and marketplaces lead to sites with their own privacy policies.
Where data is processed
Cloudflare and PostHog may process data in the United States and other countries. If you are in the EU or the UK, we rely on your consent for email updates, which you give when you confirm, and on our legitimate interest in counting visits without identifying anyone.
Your choices
To see, correct or delete anything we hold about you, email hello@slabheist.com from the address you signed up with. We reply within 30 days. You can leave the email list at any time with the link in any email.
We do not sell or share personal information, as California law defines those terms. If you are in the EU or the UK, you can also complain to your data protection authority.
Children
SlabHeist is for a general audience. We do not knowingly collect email addresses from children under 13. If you think a child signed up, email us and we will delete the address.
Changes to this policy
When this policy changes, we update the date at the top of the page. If a change affects how we use email addresses, we tell confirmed subscribers by email before it takes effect.
Contact
Questions about privacy go to hello@slabheist.com.