Privacy Policy

Last updated: September 7, 2026 · Draft under attorney review; corrections may be published without notice.

What we collect

Your email address (for sign-in and the digests you choose), your collection data (copies, costs, notes, boxes, signals, sale reports), and standard technical logs needed to run the Service. We do not collect payment card numbers — payments are processed by Stripe, which shares with us only subscription status and billing metadata.

How we use it

To run the Service: showing you your shelf and reports, sending the digests you configure, computing aggregate market data from corroborated sale reports (anonymized — never with your name or email), and keeping the Service secure. We do not sell your personal data, and we do not run third-party advertising.

Where it lives

Data is stored with our infrastructure providers (Supabase for the database, Render for hosting, Resend for email delivery, Stripe for billing), each under their own security and privacy commitments, in the United States. Access to your collection records is enforced row-by-row at the database layer: your records are readable by your account only.

Your controls

Export everything from the Account page at any time. Delete your account from the same page — deletion is immediate and removes your profile, copies, signals, flags, and shares. Digest emails stop the moment cadence is turned off or the account is deleted. Public report share links exist only when you create one and die when you revoke it.

What we share publicly

Nothing about you, unless you make it public yourself: a report share link shows the report you chose to share. Corroborated sale reports may appear in aggregate market data as facts of a sale (issue, grade, price, date, venue) — never attributed to you.

Contact

Privacy questions and requests: devon@devonmorris.com.