Privacy Policy

This is the honest version of what happens to your data on sabet.com. I'd rather you know exactly what I collect and why than read something vague. Plain English first; the legal framing is in the Terms of Service.

1. What we collect

Account data — email address, handle, display name, and the optional bio, collection story, location, social handles, website and profile photo you add yourself.
Phone number — asked for when you add a shipping address or check out, so the carrier (and I) can reach you about a delivery. Optional.
Shipping address — name, street, city, state/region, postal code, country. Required to bid (winners are charged and shipped automatically) and to buy anything physical. Stored on your account and snapshotted onto each order.
Payment data— Stripe collects your card directly. Sabet stores a Stripe customer ID, the card brand and last four digits so you can see what's on file. Full card numbers never touch our servers.
Auth data — sign-in is handled by Clerk. Sabet receives a stable user ID and your email; passwords and passkeys stay with Clerk.
Provenance + ownership— when you own, verify, transfer or are issued a certificate for a piece, that is recorded in the public ownership chain. Intentionally public (shown as “Private collector” when your profile is private).
Content you post — feed posts, forum threads and replies, comments, messages, images you upload.
Activity— bids, orders, drop subscriptions, giveaway and draw entries, club memberships, Aura points, and the emails we send you (delivery, opens and clicks, so I can see what's working).
Giveaway entries— alongside the entry itself we keep a salted hash of your IP address (not the IP) to spot duplicate entries. The hash can't be turned back into an address.
Approximate location— Vercel's edge tells us the city and country a request came from. We use it to prefill the location on your profile (you can change it), to place giveaway entrants on the map, and to decide which privacy notice to show you. We don't store precise coordinates.
Push notifications— if you turn them on, we store the browser's push subscription endpoint and keys plus the device's user-agent string so we can deliver alerts and clean up dead subscriptions.
First-touch attribution — on your first visit we note where you came from (utm source and campaign, the referring site, the page you landed on, and whether the link came from Facebook, Instagram, Google or TikTok). If you sign up, that source is stamped on your account so I can tell which channels bring collectors.
Referrals— if you arrive through a member's share link, we record who referred you (they earn Aura when you place a first bid).
Presence sessions — a random first-party session id (the sb_sessioncookie, 30 days) and the page you are on, so drop pages can show “X people watching” and I can see live traffic. Tied to your account when you're signed in; rows are pruned after 35 days.
Operational logs — IP address, request paths and error traces, kept by Vercel and Sentry for security and debugging.

2. What we don't collect

Card numbers, CVCs or bank details (Stripe holds those).
Government IDs — there is no KYC here.
Sensitive demographics (race, religion, health). No use for them.
Precise GPS location.

3. Why we collect it

Run your account, show your collection, charge auction wins and ship what you buy.
Issue and verify certificates of authenticity and keep the provenance chain honest.
Send transactional email (receipts, outbid alerts, shipping) and, unless you opt out, news from the studio.
Measure which ads and posts actually bring collectors, so the studio's money goes where it works.
Investigate fraud, duplicate giveaway entries, theft claims and terms violations.

4. Analytics and advertising measurement

This is the part most privacy pages bury, so here it is plainly. Sabet runs two third-party measurement tools:

Meta Pixel + Conversions API — the Pixel runs in your browser and sets the _fbp / _fbc cookies. When you bid or buy, our server also sends Meta a Conversions API event containing a hashed (SHA-256) version of your email, your IP address and browser user-agent, and the order value — so Meta can tell which ads led to a sale. Meta may use this to measure and improve ad delivery. Meta's privacy policy.
Google Analytics 4 (+ Measurement Protocol) — page views and events in your browser (the _ga cookies), plus server-side purchase events sent through the Measurement Protocol with the same anonymous client id. Google's privacy policy.

Your control. In the EU, EEA, UK and Switzerland neither tool loads until you accept the notice that appears on your first visit. Everywhere else they load by default and you can turn them off at any time using the link in the footer of every page. Your choice is stored in the sb_consent cookie for one year.

5. Who we share it with

These are the services that run the platform. Each sees only what it needs:

Clerk — sign-in. Email, password/passkey, profile basics. Their privacy policy.
Stripe — payments. Card details, billing and shipping address, transaction metadata. Their privacy policy.
Resend — email delivery. Recipient address and message body; reports opens, clicks and bounces back to us. Their privacy policy.
Klaviyo — email marketing. Email, name, handle and purchase stats (pieces owned, lifetime spend, club tier, Aura) so studio news can be segmented sensibly. Opting out of marketing here suppresses you there too. Their privacy policy.
Meta — advertising measurement — see section 4. Their privacy policy.
Google Analytics — site analytics — see section 4. Their privacy policy.
Printful — prints and club canvases. Receives your name and shipping address for each print order. Their privacy policy.
ShipStation — shipping labels for pieces that ship from the studio. Receives name, address and order contents. Their privacy policy.
Shopify — the apparel store at sabet.love and gift cards. Order data moves between the two stores so a purchase there can be fulfilled or credited here. Their privacy policy.
Sentry — error monitoring. Stack traces and request context; we scrub personal data before it is sent. Their privacy policy.
Vercel — hosting, edge geolocation, image storage for uploads. Their privacy policy.
Neon — the Postgres database. Their privacy policy.
Upstash — Redis for rate limiting and short-lived caches (keys are ids, not personal data). Their privacy policy.

We don't sell your data to data brokers. Sharing hashed identifiers with Meta and Google for ad measurement can count as “sharing” under California law, which is why the opt-out in section 6 exists. Beyond the vendors above, the only time data leaves Sabet is in response to a valid legal request.

6. Do Not Sell or Share

California residents (and anyone else) can opt out of the ad-measurement sharing described in section 4 at any time: . That link is in the footer of every page. It stops Meta Pixel and Google Analytics from loading, stops our first-touch attribution cookies from being set, and is remembered for a year in this browser. It does not affect the cookies you need to stay signed in or check out, and it doesn't change anything about your account, so repeat it on each device you use. We don't discriminate against anyone who opts out.

7. Cookies

Clerk session cookies (__session, __client_uat and related) — keep you signed in. Strictly necessary.
sb_session— random presence id, 30 days. Powers “people watching” counts and live traffic. First-party, functional.
sb_consent — your tracking choice, 1 year.
sb_src and sb_ref — first-touch source and referring member, 30 days. Not set when you have opted out.
_ga, _ga_* — Google Analytics. _fbp, _fbc — Meta Pixel. Only when tracking is allowed.

8. Public vs. private data

Sabet is a transparent collector platform. By default your handle, display name, bio, photo, owned pieces and ownership records are public. You can make your profile private from /settingsat any time; the provenance chain stays intact but shows “Private collector” instead of your handle.

9. Your rights and how to use them

See and correct your data — most of it is on your profile and /settings. Email for a complete export.
Delete your account — self-serve at Settings → Delete account. It wipes every personal field (email, name, handle, phone, address, socials, saved card, Stripe customer, attribution), removes your login, push subscriptions and sessions, and closes the account. Ownership records, bids, orders and certificates stay in the ledger, showing “Deleted user”, because the chain of custody on every piece has to survive its owners. You can also email support@sabet.comand I'll do it for you within 30 days.
Stop marketing email— every studio email has a one-click unsubscribe link at the bottom, or flip “News & updates” off in settings. Transactional email (receipts, outbid alerts, shipping) keeps running.
Opt out of ad measurement — section 6.

California (CCPA/CPRA), EU/UK (GDPR) and other regional rights apply where you live — access, correction, deletion, portability, objection, and no discrimination for using them. Email support@sabet.com to exercise any of them; I aim to reply within 5 business days.

10. Retention

Account data lasts as long as your account does. Presence sessions are pruned after 35 days; attribution cookies expire after 30. Order, payment and certificate records are kept for as long as the provenance ledger exists, as described above. Logs are kept for 30 days unless tied to a security incident.

11. Children

Sabet is for adults — you must be 18 to hold an account. If we learn we've collected data from someone under 13, we'll delete it.

12. Security

All traffic is HTTPS. Payment data is tokenized by Stripe. Database backups are encrypted at rest. Admin access is restricted by role and every admin action is logged. No platform is impenetrable; we follow industry practice and patch promptly. Security reports: /security.

13. Changes

When our practices change, this page changes and the date at the top moves. Material changes get a notice on the site and an email to active accounts.

14. Contact

Questions, requests, complaints — email support@sabet.com. Sabet Studio, Los Angeles, California.