Privacy Policy

Information We Collect

• Account information: username, email address, and hashed password when you create an account.
• Shipping information: name and address when you make a purchase, used solely for shipping your cards.
• Payment information: processed by Stripe. We never store your credit card number, CVV, or full card details on our servers.
• Transaction records: flip results, order history, and provably fair proof data (server seeds, commit hashes).

How We Use Your Information

• To process your purchases and ship cards to you.
• To verify provably fair flip results.
• To send order confirmations and shipping notifications.
• To prevent fraud and enforce our terms of service.

Information We Share

We share information only with:

• Stripe — for payment processing.
• Shippo — for shipping label generation (your shipping address).
• We do not sell, rent, or share your personal information with third parties for marketing.

Data Security

Passwords are hashed with bcrypt. Sessions use signed JWT tokens in httpOnly cookies. Payment data is handled entirely by Stripe and never touches our servers. All connections are encrypted via HTTPS.

Cookies

We use a single session cookie (tot-session) to keep you logged in. No tracking cookies, no analytics cookies, no third-party cookies.

Your Rights

You can request deletion of your account and associated data at any time by contacting us. Provably fair records (flip seeds and results) are retained for transparency and verification purposes.

Contact

Questions about this policy: thisorthat@slabtrack.io