Privacy Policy

What we collect

Account details. Your name, email address and a hashed password. Passwords are stored using bcrypt and are never readable by us.

What you track. The comics you mark owned, wanted or read, the editions and copies you record, your ratings, notes, purchase prices, condition and grading details, your reading plans, and your buy list.

Store relationships. Which comic shops you've connected to, and which items those shops have pulled for you or you've confirmed picking up.

Operational logs. Records of calls we make to the services below, kept so we can monitor failures, latency and cost.

What we share, and with whom

We do not sell your data, and we do not use it for advertising. It reaches other companies only where they perform a specific job for the app:

• Stripe — Payments and subscription billing for Pro accounts. Your email address and payment details, which are handled by Stripe and never stored by IssueStash.
• Resend — Sending the emails you've opted into, plus account emails like password resets. Your email address, name and the contents of the message.
• Metron and VerseDB — The comic catalog: series, issues, covers, variants and release dates. The titles and issue numbers you search for or track. These lookups are not tied to your account.
• Google (Gemini) — Generating series suggestions and story-arc summaries. A summary of series titles in your collection. Not your name, email or purchase history.
• Cloudflare R2 — Storing mirrored cover images so pages load quickly. Cover artwork only. No personal data.
• eBay — Looking up current asking prices for issues in your collection. The titles and issue numbers you own, used as search queries. These lookups are not tied to your account.

What comic shops can see

When you connect to a shop, that shop can see your buy list: the issues you want, the editions you prefer, and your name so they know whose books they're pulling. They cannot see the rest of your collection, your reading activity, your ratings, your notes or what you paid. Disconnecting from a shop, on your connected stores page, stops that access immediately.

A list you share with a public link is visible to anyone who has the link. Those pages are not indexed by search engines, and you can revoke a link at any time from your sharing settings.

Email

Account emails — password resets, and confirmation that a store account was approved — are part of the service and are sent when the corresponding action happens. Everything else is optional: the weekly release digest, ready-for-pickup alerts and store FOC alerts can each be switched off in your settings, or from the unsubscribe link in the footer of any of those emails.

Your data, on your terms

You can export everything tracked about you as JSON from your settings at any time. Deleting your account from the same page removes your account and the collection, buy list, reading and store-connection records attached to it.

Contact

Questions about any of this, or a request to access or delete your data, can be sent to the address in the footer of any IssueStash email.