Skip to content

Privacy Policy

Last updated: September 17, 2026 · Effective: September 17, 2026

1. Who we are

Slipcased is operated by Jonathan Ng d/b/a Slipcased ("we," "us"). This policy explains what personal data we collect when you use the Slipcased website and services, why, and what control you have. It is part of, and uses the same definitions as, our Terms of Service.

2. What we collect

  • Your account email. To create and sign you in to your account (via email link, password, or Google sign-in). If you sign in with Google, we receive the email address associated with that Google account. We do not store your password — authentication is handled by our provider.
  • Your collection data. Everything you put into Slipcased: the editions you track and their statuses (want, pre-ordered, owned, passed), your ISO and UFT lists, notes, conditions and prices you record, the companies and boxes you follow, identification photos you upload, and your profile details (display name, bio, handle, location) if you set them.
  • Usage analytics. We use PostHog to understand how the product is used (pages viewed, features used, rough device and browser info) so we can improve it. This is product analytics, not ad tracking — we don't use it to build advertising profiles or sell audiences.
  • Technical data. Standard server and security information such as IP address and request logs, used to keep the Service running and secure.

3. How we use it

  • to provide the Service — store your collection and sign you in;
  • to operate, secure, debug, and improve the product;
  • to send you essential account and service messages (for example, a sign-in link or an important notice about the Service);
  • to comply with the law and enforce our Terms and Content Policy.

We do not use your collection data to target advertising.

4. What becomes public

There are two ways your collection can be seen by someone else: a shared list link, which you create deliberately, and your profile page at slipcased.com/u/your-handle.

Your profile

If you created your account on or after September 2, 2026, your profile is public by default. Two things limit what that means in practice:

  • It has no address until you claim a handle. A profile is reachable only at slipcased.com/u/your-handle. Until you claim a handle in Settings there is no URL that resolves to your profile, so nobody — including us — can link to it.
  • Not everything is on. Sections you have not switched on are not merely hidden; they are absent from the page entirely.

Once you have claimed a handle, this is exactly what a stranger with that link sees on a new account:

  • On by default — your handle, the month and year you joined, and any display name, bio and location you have set; your collection (the shelf you pin, your six most recently added editions, how many editions you own, and the series you collect most); your ISO list of editions you are looking for; and who you follow (companies and boxes).
  • Off by default, until you switch it on — your up-for-sale and up-for-trade shelf, including any asking prices on it, and your links and rep codes. Nothing you have listed for sale or trade is visible to anyone until you deliberately turn that section on.
  • One consequence worth being explicit about: an edition you have listed for sale is still an edition you own, so it can appear among your recently added or on your pinned shelf — because your collection is on, not because your sale list is. What stays private is that it is for sale and what you are asking for it. Neither is shown anywhere until you switch that section on.
  • Never shown, on any setting — your notes, the prices you paid, your email address, and your own identification photos of editions that exist in our catalogue.
  • Covers flagged sensitive are excluded from your profile by default. You can choose instead to include them blurred.
  • Location is blank unless you type one. It is a free text field with no default and no location detection — we never derive it from your IP address or your device. If you fill it in, it appears on your profile, so keep it as coarse as you are comfortable with.

Profiles are not indexed by search engines. Every profile page is served with noindex, so it should not appear in search results. That is a request search engines honour rather than a wall — treat a public profile as visible to anyone who has the link.

Accounts created before September 2, 2026 were not changed by this. If your profile was private, it is still private, and only you can change that. You can make any profile private again at any time from Settings, and turning a section off or going private removes it from public view going forward.

Shared list links

When you share a list, Slipcased creates a read-only link (slipcased.com/s/…) that shows just that list. Anyone with the link can open it without an account. Sharing a list is always a deliberate act — no list is ever shared by default. You can revoke a link anytime from Settings — revoking rotates it so the old link stops working. Private details like your notes and the prices you paid are never included in a shared view.

5. Who we share it with

We do not sell your personal data. We share it only with:

  • Service providers who run the Service on our behalf — our hosting and database provider (Supabase), our application host (Vercel), and our analytics provider (PostHog) — bound to handle it only for us;
  • Other users, but only for the content you deliberately made public (Section 4);
  • Authorities, when we're legally required to, or to protect the rights, safety, and security of our users, the public, or the Service.

6. How long we keep it

We keep your data for as long as your account is active. When you delete your account, we delete your collection data; residual copies may persist briefly in encrypted backups before they age out, and we may retain limited records where the law requires it. Content you contributed to the shared catalog, or that others relied on, may remain in de-identified or catalog form.

7. Your choices and control

  • Access and edit. Your collection is yours to view and edit in the app at any time.
  • Delete your account yourself. You can permanently delete your account and everything in it from Settings → Delete account — no email required. This is self-serve and takes effect immediately.
  • Control what's public. Revoke shared links and switch profile sections on or off from Settings at any time (Section 4).

8. Security

We use reputable infrastructure providers and standard safeguards (encrypted transport, access controls, row-level database security) to protect your data. No online service can promise perfect security, so please use a strong, unique password and keep your sign-in method safe.

9. Children

Slipcased is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it. See the Terms (§2) for age requirements.

10. Where we operate

We operate the Service from the United States, and your data is processed there. The Service is not directed at individuals in the European Union or European Economic Area; if that changes, we will provide the additional disclosures those laws require.

11. Changes to this policy

We may update this Privacy Policy as the product evolves. Material changes update the "Last updated" date above and, where appropriate, we'll notify you in the app or by email.

12. Contact

Questions about your privacy or this policy? Email support@slipcased.com.