Privacy Policy
Draft — awaiting legal review. The final language on this page must be cleared by counsel before we accept real-money transactions. Terms here are the operator's good-faith description of how the service works; they are not legal advice and do not replace a signed contract.
This policy explains what personal information SlabTrack Breaks collects, how we use it, and what control you have over it.
What we collect
- Account basics: name, email, phone (optional).
- Shipping address: street, city, state, ZIP — used exclusively to ship cards you win.
- Age verification: date of birth (used to derive age; not displayed or shared).
- Payment data: handled by Stripe. We never see or store card numbers; we store a Stripe ID so we can issue refunds.
- Evidence metadata: IP address, user agent, timestamp — captured at checkout for chargeback defense. Retained 3 years.
How we use it
- To process your spot purchase and ship your winnings.
- To notify you of your break's reveal, win, and buyback offer.
- To comply with tax, anti-fraud, and dispute obligations.
What we don't do
- Sell, rent, or swap your data with anyone outside the SlabTrack ecosystem.
- Show ads.
- Use your data to train models.
Your rights
You can request a copy or deletion of your personal data at any time by emailing privacy@slabtrack.io. Requests are honored within 30 days. Deletion does not remove records we must retain for tax or chargeback reasons, which are kept in a separate restricted archive.
Cross-satellite data flow
SlabTrack (the parent platform), ThisOrThat (the flip marketplace), and SlabTrack Breaks share a single identity layer. Cards you win here appear in your SlabTrack collection. If you initiate a SlabTrack SSO flow, your name and email are passed back as part of the login token — no other profile fields are shared without your explicit action.