Last updated 2026-09-21. Who we are: SlabbyPrep, Boston, Massachusetts, USA — [support email not configured]. For the little processing we do, we are the “controller”.
The short version: we don’t collect your data. No accounts, no cookies, no analytics, no tracking, no database. Your photos and results never leave your browser. Stripe handles payment on its own pages under its own privacy policy.
Processed and stored only in your browser (local storage). Never sent to us. Clear the site’s data in your browser to delete them.
The card name you type is sent to our lookup function, which forwards it to PriceCharting and returns prices. We do not store or log it. Legal basis: performing the service you asked for.
When you subscribe, Stripe collects your email, payment details, billing country and, where required, tax details. Stripe is an independent controller of that data under Stripe’s privacy policy. Our functions receive from Stripe only what is needed to confirm that your subscription is active — a checkout or subscription id, its status and the end of the paid period — and place it in your licence key; we store none of it. If you ask us to recover a key, the email and card last-4 you enter are sent to Stripe to find your subscription and are not kept. If you arrived through a link with a creator or channel tag (for example ?src=yt-name), that tag is remembered by your browser for the visit and passed to Stripe with your checkout so the creator can be credited; it identifies the link, not you.
Our hosting provider (Vercel) keeps standard, short-lived request logs (IP address, time, URL) to run and protect the service. Legal basis: our legitimate interest in keeping the service running. We do not use them to identify you.
If you write to us, we keep the conversation only as long as needed to answer you.
Under the GDPR, the UK GDPR and US state privacy laws you can ask what we hold about you and to correct, delete or receive it, object to processing, or complain to your supervisory authority. Because we hold nothing about you beyond what is in your own browser, most of these are satisfied by clearing your site data; for anything else, email [support email not configured]. Stripe answers requests about payment data.
Stripe and Vercel are US companies. Where EU or UK data reaches them it is protected by their participation in the EU-US Data Privacy Framework and/or standard contractual clauses.
SlabbyPrep is for adults (18+). We knowingly collect nothing from anyone, including children.
The date above says when this policy last changed.