Privacy Policy

1. About this Policy

This Policy explains how the operator of Slabss (“Slabss”, “we”, “us” or “our”) handles personal information in connection with slabss.xyz and the services that link to this Policy. It covers information collected through our website, accounts, supported wallet and funding flows, collection records, transactions, custody and delivery requests, and support.

Personal information includes information that identifies you or can reasonably be linked to you. A wallet address, transaction record or device identifier may be personal information when it can be connected to a person. Public blockchain activity is not necessarily anonymous.

This Policy describes our handling of information. It is not blanket consent to every kind of processing. Where consent is required for a particular activity, we will request it separately.

2. Information you provide

Depending on the features you use, we collect:

• Account information: your account identifier, profile name, email address or information supplied by your chosen sign-in provider, linked wallet addresses, country or age eligibility declarations, and account preferences.
• Collection information: cards or tokens you add or import, certificate details, photographs, notes, valuations, wishlists and saved searches.
• Transaction information: orders, pack selections and outcomes, offers, purchases, sales, buybacks, amounts, fees, currency and network details, transaction hashes, approvals and relevant signed transaction records.
• Funding information: the selected Solana wallet and token, requested amounts, observed balances and funding-session status needed to track the balance.
• Custody and delivery information: submitted item details, provenance or verification evidence, custody instructions, recipient name, delivery address, contact information, shipping quotes and tracking.
• Financial feature information: if you use an enabled borrowing or liquidity product, the relevant collateral, appraisal evidence, accepted terms, loan or pool position, repayments, withdrawals and settlement records.
• Support information: messages, order references and other details you provide when requesting help or exercising your rights.

Only provide information relevant to your request. Do not send support a wallet seed phrase, private key or unnecessary identity or financial documents. If a verification provider requires identity documents, use the approved verification flow identified for that purpose.

3. Information from providers and public sources

We receive information needed for the services you choose from authentication and wallet providers, connected wallets, collectible issuers or marketplaces, custodians, payment services, carriers and verification providers.

For example, a sign-in provider may return an account identifier and permitted profile fields; a wallet or blockchain service may return holdings, balances or transaction status; and a collectible provider may return an award, sale, custody or redemption record. The information received depends on your chosen feature, permissions and the provider's service.

We also read relevant public blockchain records to verify wallet ownership, balances, assets, payments and transfers. We may associate those records with your Slabss account when you link a wallet or perform an activity through Slabss. Linking a wallet can therefore connect your account with publicly visible activity.

4. Technical information and browser storage

When you access the service, Slabss and its infrastructure providers may process technical information such as IP address, browser and device information, request time, requested page or endpoint, errors, security events and session identifiers. We use information needed to deliver requests, maintain sessions, prevent abuse and diagnose faults.

We use cookies and browser storage for sign-in, account security, preferences and other features you request. Blocking necessary storage may prevent sign-in or other features from working. You can manage browser storage through your browser settings.

External image and metadata hosts may receive technical information when your browser loads their content. Third-party sign-in, wallet and funding widgets may process technical information and use their own storage when loaded or used. Their privacy and storage practices are described in their policies. Optional storage and tracking requiring consent must be handled through the applicable consent controls.

5. Optional usage measurement

With your permission, Slabss records limited campaign attribution and steps in the collecting journey to understand how people reach and use the service. These can include a visit source or campaign, account creation, starting funding or checkout, and verified purchase or refund outcomes. Measurement may be connected to your signed-in account to understand repeat use and transaction completion.

This is first-party measurement on Slabss. It does not send these measurement events to an advertising platform. Declining it does not prevent browsing, sign-in or purchasing. Essential service, transaction and security records continue to be processed where needed to provide the service or meet legal obligations.

Anonymous measurement visits expire after 30 days. Account measurement records expire after 90 days. Your browser remembers your measurement choice for up to 180 days. You can change the choice through the Privacy page at https://slabss.xyz/app/#policies/privacy. Turning measurement off removes the current visit and signed-in account measurement records; it does not erase underlying orders or other independently required service records.

Slabss disables this optional measurement when your browser sends Do Not Track or Global Privacy Control. These signals do not delete public blockchain information or disable necessary security and transaction processing.

6. How we use information

We use relevant information to:

• Create and secure accounts, authenticate access and link wallets you authorise.
• Maintain your collection, preferences, saved items and activity history.
• Prepare and reconcile authorised funding, purchase, sale, custody, borrowing, pool and delivery actions.
• Verify payments, ownership, eligibility and settlement and investigate interrupted or disputed transactions.
• Respond to requests and provide service, security and transaction notices.
• Detect abuse, fraud, unauthorised access and attempts to manipulate transactions or records.
• Meet applicable legal, accounting and recordkeeping obligations and establish or defend legal claims.
• Improve the service using necessary operational information and optional measurement when you permit it.

If we offer promotional communications, we will obtain consent where required and provide an appropriate opt-out. Withdrawing from marketing does not stop necessary account, security or transaction messages. We do not treat accepting the Terms as an automatic subscription to marketing.

7. Legal grounds where required

Where applicable privacy law requires a legal basis, we process information as necessary to perform the services you request, meet legal obligations, pursue legitimate interests such as security and fraud prevention where those interests do not override your rights, or act on your consent.

Optional usage measurement and consent-based marketing rely on your choice where consent is required. You can withdraw consent without affecting the lawfulness of earlier processing. Information required for a service may still be needed to provide that service or fulfil a separate legal obligation.

8. Who receives information

We disclose information relevant to the purpose to:

• Infrastructure and service providers supporting hosting, databases, storage, security, authentication and wallet connections. These include the providers used for the selected feature, such as Netlify, Privy and Reown, where used.
• Collectible and custody providers, including Collector Crypt for supported activity, and other issuers or custodians involved in the specific item or service you request.
• Wallet and payment providers involved in your selected Solana transaction.
• Fulfilment providers and carriers handling your requested delivery, and verification services where a check is required.
• Transaction counterparties, limited to the information needed to complete the transaction or resolve a related issue. A transaction does not entitle a counterparty to your unrelated private collection notes or account details.
• Authorised support and operations personnel who need access to perform their work.
• Professional advisers, authorities or other recipients where disclosure is required by law or reasonably necessary to protect lawful rights, investigate fraud or respond to legal process.
• A prospective or actual successor in a business transfer, subject to appropriate confidentiality and applicable legal requirements.
• Other recipients you specifically authorise.

Some providers process information on our behalf; others independently determine how they use information for their own services and legal obligations. Their own privacy policies apply to that independent processing. Using a provider through Slabss does not make all information it collects part of a Slabss-controlled record.

Slabss does not sell personal information or share it for cross-context behavioural advertising. The service disclosures described above enable the features you choose and our lawful operations. If our practices materially change, we will update this Policy and provide any notice or choice required by law before the new activity.

9. Public blockchain information

Wallet addresses, token ownership, payments, amounts, transfers and related transaction data may be permanently visible on public blockchains. Other people can copy, analyse and associate that information with you. A transaction or token may expose information beyond what the Slabss interface displays.

Deleting a Slabss account, unlinking a wallet or withdrawing consent does not delete blockchain records or copies held independently by other people. We can address information under our control, but cannot rewrite a public blockchain. Do not place private contact details or other unnecessary personal information in public transaction messages or metadata.

10. Retention and account deletion

We retain information for the purposes described in this Policy and for periods required by applicable law. Relevant factors include whether your account is active, whether a payment or delivery remains unresolved, whether an asset is held in custody, whether a loan or pool position is open, and whether records are needed for an actual dispute, fraud investigation or legal obligation.

Resolved in-app support conversations have a default retention period of 180 days after their last update. The current support retention period is displayed on the Privacy page. Reopening or updating a conversation changes the relevant last-update date. Optional measurement has the shorter periods described above.

Account settings provide an export and account-deletion request. Deletion removes eligible personal records and revokes account access. Unresolved obligations may need to be settled before the normal account-closure process completes. We may retain limited transaction, counterparty, audit or compliance records where necessary and lawful, and explain relevant exceptions when responding to a request.

Outstanding obligations do not automatically justify retaining all of your information or refusing every privacy request. We will consider whether unrelated information can be deleted or its use restricted while the obligation is resolved.

Deleted information may remain in protected backups until those backups are overwritten or expire under the applicable backup cycle. Retained copies remain subject to this Policy and are not intended for ordinary active use. Account deletion does not transfer or destroy assets in a wallet and does not erase records independently retained by a provider or public blockchain.

11. International processing

Slabss uses online infrastructure and providers that can operate in countries other than your country of residence. Your information may therefore be processed internationally, and the applicable privacy rules may differ.

Where applicable law requires safeguards for an international transfer, we must use an appropriate lawful mechanism. The appropriate mechanism depends on the recipient, destination and applicable law. We do not rely on your use of the website as blanket consent to international transfers. You can ask support about the recipients and transfer arrangements relevant to your information.

12. Your choices and rights

You can review and update supported account information, manage linked wallets and preferences, export available account data and request account deletion through Account settings. Use the Privacy page to change optional measurement preferences. Manage wallet permissions and third-party account connections through the relevant wallet or provider as well.

Depending on the law that applies, you may have rights to obtain access or a copy, correct inaccurate information, request deletion or restriction, object to certain processing, receive portable information, withdraw consent, or opt out of regulated sales, sharing or targeted advertising. Where applicable, you may also request information about significant automated decisions and challenge a decision affecting you.

Submit a request through https://slabss.xyz/app/#support and label it “Privacy request”. Describe the request and provide enough information for us to locate the relevant record. We may ask for proportionate proof of identity or authority so we do not disclose or delete someone else's information. Never provide a seed phrase or private key as proof.

We will respond within the period required by applicable law and explain any lawful refusal, limitation or available appeal. We do not discriminate against you for exercising privacy rights. You may also complain to the privacy or data-protection regulator responsible for your location; contacting us first is not a condition of that right.

13. Security and responsibility for losses

We use safeguards intended to protect personal information, including protected connections, account authentication and access controls. Their effectiveness also depends on your devices, account security, wallet permissions and the providers you choose. No online service can guarantee absolute security.

To the fullest extent permitted by applicable law, Slabss is not responsible for security-related losses to the extent they are caused by circumstances outside our reasonable control and were not caused or contributed to by our breach of this Policy, negligence or unlawful conduct. These can include compromise of your device or external wallet, recovery information you disclose to another person, information you choose to publish on a public blockchain or social platform, and failures of an independent external service. This does not remove our legal responsibilities for protecting information under our control, choosing or using service providers, responding to an incident, or providing a remedy where required by law.

Section 17 of the Terms and Conditions at https://slabss.xyz/terms/ explains the allocation of transaction and service risks and limitations of liability where those Terms lawfully apply. This Privacy Policy does not create a separate waiver of your privacy rights, excuse a failure to use legally required safeguards, or prevent a complaint or claim for compensation available under applicable law.

Report suspected account compromise or inappropriate disclosure through support. We will assess incidents and make notifications where required by applicable law. Please provide the relevant account or transaction reference without including secrets or unnecessary sensitive information.

14. Children

Slabss accounts and transactions are intended for people aged 18 or older. We do not knowingly permit children to create accounts or deliberately collect their information for those services. If you believe a child has supplied information to Slabss, contact support. We will investigate and take appropriate action, including deletion or restriction where required, while preserving records that lawfully need to be retained.

15. Changes and contact

We may update this Policy as our service and practices change. The published Policy will show its version and effective date. We will provide appropriate notice of material changes and request fresh consent where required. Updating a policy does not itself authorise a new use that requires your consent.

Website: https://slabss.xyz
Privacy questions and requests: https://slabss.xyz/app/#support
Please label your request “Privacy request”.

If you cannot sign in, contact the official Slabss account at https://x.com/getslabss to request a private support channel. Do not post identity documents, addresses, transaction details or other personal information publicly. The social platform processes your information under its own privacy policy.