Privacy policy

• We collect what you give us to run your account and your collection, plus a small amount of record-keeping about sign-ins, devices and errors.
• We never sell your personal information, and we never share it for advertising. There are no ad trackers and no analytics tools on StackerMint, on the website or in the app.
• Your collection is private unless you choose to show something on your public profile or send someone a link.
• You can delete your account yourself, at any time, from Settings on the website or in the app.

Your account

• Your name and email address.
• Your password, stored as a one-way hash, which means we cannot read it.
• If you turn them on: your passkeys (we keep the public half and a name for each one; the private half never leaves your device), and your two-factor authentication secret and recovery codes, which are stored encrypted.
• Your settings, such as your collecting preferences, display choices and email preferences.

Signing up

When you sign up, we keep the name and email address you gave us, when you signed up, and which page you signed up from. If you start signing up but don't set a password, we keep those details so we can send you a new link if you ask.

If you asked for an invite before StackerMint opened sign-ups, we still keep the email address you gave us, when you asked, and which page you asked from, until you ask us to delete it.

Your collection

Everything you add to your collection is stored so that we can show it back to you. That includes:

• coins, paper money and bullion, with the details you enter, such as grade, certification number and notes;
• the photos you upload, and the videos you record of a coin, including their sound;
• sets, want lists, tags and storage locations;
• financial details: what you paid, when you bought it, your cost basis, the values you or the price guides put on each piece, and any price you would sell at.

When you record what you paid for a piece, we also keep a transaction record of the purchase, as described under Transaction records.

Your public profile

If you turn on a public profile, we keep what you put on it: your handle, the name and bio you choose to show, your profile picture, the pieces and sets you choose to show, and the badges you have earned. If you change your handle, your old address forwards to the new one for 90 days.

Sales you record yourself

If you record a sale you made somewhere else, such as at a show or to a friend, we keep what you enter: the price, fees, date and quantity, and, only if you type them, the buyer's name, email address, phone number and shipping address, and your notes. The buyer's shipping address is cleared 90 days after the sale is delivered. If you save the buyer as one of your contacts, the contact keeps the details you typed until you change or delete it.

We also keep a transaction record of the sale, as described under Transaction records. It stays after you remove the sale from your collection or delete your account. It never holds the buyer's name, email address, phone number or street address; only their state and country, if you typed a shipping address.

Getting paid for sales

If you are approved to receive payouts for your sales, you set up your payout account with Stripe, on Stripe's own pages. Stripe collects the identity and bank details it needs and handles them under its own privacy policy. We keep only Stripe's reference for your account and whether it is ready to receive payouts.

Feedback and requests you send us

When you use Send feedback, we keep your message, the category you picked and the address of the page you were on. If you ask us to add a coin variety to the catalog, we keep that request.

Sign-in and activity records

• One record for each time you sign in, holding only the time. It does not include your IP address, your device or your location.
• The time of your last sign-in and the last time you used StackerMint.
• While you are signed in on the website, your session record holds your IP address and a description of your browser, as sent by the browser itself. It is cleared out after the session expires.
• Your IP address is also used briefly to stop repeated sign-in attempts. Those counters expire within minutes.
• Our server logs record what happened, such as "a coin was added", against your account number. They do not record your password or what you typed into a form.

When something goes wrong

When a form turns down what you entered, or a page fails for a signed-in member, we keep a record of it so we can fix the problem. It holds the page address, what went wrong, a description of your browser, and what you had typed into that form. Passwords, security codes, tokens, card-like numbers and tax ID numbers are removed before anything is saved. If a page fails for someone who is not signed in, we keep the page address, what went wrong and the browser description, and nothing typed. These records are kept for 180 days and then deleted.

The StackerMint app uses the same account and keeps the same records as the website. On top of that:

• Your devices. When you sign in, the app sends us your phone's name (for example, "Alex's iPhone"), whether it is iOS or Android, the app version, and a random code that identifies this installation. We show these to you under Settings → Devices, so you can sign a device out. We do not store your phone's IP address with them.
• On your phone. Your sign-in token is kept in your phone's secure keychain. To make the app quick and usable offline, it keeps an encrypted copy of what it has shown you, including your collection's values. That copy is erased when you sign out. Photos you take while offline wait on your phone until they can be uploaded.
• The camera. When you point the camera at a slab or a barcode, the label is read on your phone. The photo stays on your phone unless you save it. The text read from the label is sent to us so we can find the certification number; we use it to answer and do not keep it. On iOS the reading is done by Apple's own on-device tools. On Android it is done by Google's ML Kit, which runs on the phone; Google may receive basic diagnostic information about how ML Kit is working, but not your photos or the label text.
• Your photo library and microphone. The app opens your photo library only to let you pick a photo or video, and uses the microphone only while you record a coin video.
• Face ID and fingerprint. If you use them to sign in or to lock the app, your phone checks them. We never receive them.
• No location. The app does not ask for or use your location.
• No push notifications are sent by StackerMint today. If that changes, this policy will say so first.

Your photos and videos are stored on our servers in the United States. Every night they are also copied to a private backup in DigitalOcean Spaces, so that a failed server does not lose your pictures.

The backup copies in DigitalOcean Spaces are kept until a later clean-up removes them. That is true even after you delete a photo or delete your account: the backup copy stays until that clean-up happens.

StackerMint may use photos that members upload as reference images in the StackerMint catalog, for example to show what a coin looks like. When we do, we do not show your name or connect the photo to you or your collection. There is no opt-out from this use. We do not use videos this way.

• Reports. When you report a profile, we keep who reported it, the reason you chose, your note, the page, and the outcome. We also keep a frozen copy of the reported page, including its images, exactly as anyone could see it at that moment, so our team can review it even if it changes. Reports and these copies are kept with no set end date, because they are our record of how we handled abuse. If you delete your account, your reports stay but no longer show who made them. If the reported member deletes their account, the reports and copies about them stay.
• Blocks. When you block a member, we keep that you blocked them and when. The member is not told. A block is deleted when either of you deletes your account.
• Takedowns and suspensions. If we remove content, hide a profile or suspend an account, we keep what we did, the reason, the date and which member of our team did it, and we email the member concerned.

We keep a record of every sale, purchase and offer made or recorded on StackerMint, including the sales and purchases you record yourself. Each record holds:

• what the item was, with its grade and certification number;
• the price, the fees, the quantity and the date;
• where it was bought or sold, such as at a show, from a dealer, or on StackerMint;
• the price guide values and the metal spot price on that day;
• who the buyer and seller were, and the state and country each of them was in, where we know it. For a purchase you record yourself, that is who you bought from, as you typed it.

We keep these records to keep buying and selling on StackerMint honest, to look into fraud and settle disputes, and to work out price statistics.

While your account exists, your transaction records are linked to it.

When you delete your account, your transaction records stay, but your private details are removed from them: your name, email address, phone number and street address. Only your state and country stay. The one exception is a sale paid for through StackerMint. For those sales we keep the buyer's and seller's names and email addresses, encrypted and seen only by StackerMint staff, so that we can still deal with fraud and disputes after an account is gone.

We may use transaction records in aggregate, for example to work out the average price a coin sells for. We never sell them, and we never publish anything from them that identifies you.

We use it to:

• run your account and your collection, and show your collection back to you;
• look up certification numbers and price guide values for the pieces you add;
• send you the emails you need, such as sign-up links, sign-in help and password resets;
• read and answer your feedback;
• review reports and keep StackerMint safe;
• keep transaction records, look into fraud and disputes, and work out price statistics, as described under Transaction records;
• find and fix errors, and keep StackerMint secure;
• meet our legal obligations.

Nothing in your collection is public unless you choose to make it so. There are two ways to do that:

• Your public profile. If you turn it on, anyone, including people who are not signed in, can see what you chose to show on it, and search engines may find it.
• A link to a piece or a view of your collection. Anyone who has the link can see what it shows. We count how many times a link is opened and when it was last opened. We do not record who opened it.

Visits to a public profile are counted anonymously, once per visitor per day, without cookies. To tell one visitor from another within a day, we use a scrambled code made from the visitor's IP address and browser description, and the key for that code is thrown away when the day ends, so a visitor cannot be followed from one day to the next. We also note the kind of device, whether the visitor was signed in to StackerMint, the website that linked to the profile, if any, and, when the visitor arrived by one of the named links the owner hands out, which of those links it was. That says which link was used, never who used it. We note which sets and pieces were opened during the visit, and whether the profile's link was copied. When someone visits, we look up their approximate location (their country, or their state if they are in the US) from their IP address, using a location database we keep on our own server; only that is stored, not the IP address or a city. The profile's owner is shown the counts, never who visited. Visit records are kept for 400 days.

We use a small number of companies to run StackerMint. They process data for us, under our instructions, and not for their own purposes.

• DigitalOcean hosts our servers and database in the United States, and holds the nightly photo backups in DigitalOcean Spaces.
• Postmark sends our emails. It receives your email address and the email we are sending you.
• Laravel Nightwatch watches our servers for errors and slow pages. It receives your account number (not your name or email address), your IP address, and the address of the page, with sign-in links and secret codes removed. It does not receive what you type into forms.
• Stripe handles payouts to members who are approved to receive them. It receives what you give it when you set up payouts, and our reference for your account.
• PCGS and CAC receive the certification numbers you look up, so we can fetch the coin's details and pictures. They do not receive your name or email address.
• Greysheet receives catalog identifiers so we can fetch price guide values. It receives nothing about you.
• MetalpriceAPI supplies metal spot prices. It receives nothing about you.
• MaxMind supplies the location database we use for profile visit counts. We download it to our own server, so MaxMind receives nothing about you or your visitors.
• Apple and Google deliver the app through their app stores, and handle your download under their own terms. On Android, Google's ML Kit reads labels on your phone, as described under The app.

We may also disclose information if the law requires it, to protect StackerMint or its members from fraud or harm, or as part of a sale or merger of the company. If that happens, this policy still applies to your information.

• We never sell your personal information.
• We never share it for cross-context behavioral advertising, which is the term California law uses for ads that follow you from site to site.
• We do not use advertising trackers or analytics tools, on the website or in the app.
• We do not send marketing email unless you have said yes to it. If you do say yes, you can take it back at any time by using the unsubscribe link in the email or by writing to us.

The StackerMint website uses only the cookies it needs to work:

• a session cookie, which keeps you signed in as you move between pages;
• a security cookie that protects forms against cross-site request forgery;
• a "remember me" cookie, only if you tick "Remember me" when you sign in.

We also use your browser's own storage to remember display choices, such as the size of your gallery cards. That stays in your browser and is not sent to us. There are no advertising or analytics cookies, so there is no cookie banner. The app does not use cookies; what it keeps on your phone is described under The app.

• Your account and your collection: until you delete them.
• Records of form errors and failed pages: 180 days.
• Profile visit records: 400 days.
• A buyer's shipping address on a sale you recorded: 90 days after delivery. A buyer you saved as a contact: until you change or delete the contact, or delete your account.
• Transaction records: with no set end date, with your private details removed when you delete your account, as described under Transaction records.
• Reports and the copies of reported pages: with no set end date, as described under Reports, blocks and keeping StackerMint safe.
• Database backups: 14 days. A deleted account can survive in a database backup for up to 14 days, and then it is gone.
• Photo backups in DigitalOcean Spaces: until a later clean-up removes them, as described under Photos.
• Invite requests from before sign-ups opened: until you ask us to delete them.
• Sign-ups you didn't finish: until you ask us to delete them.

You can delete your account yourself:

• On the website: open your account menu (your name in the sidebar, or your initials at the top of the screen on a phone), choose Settings, then Profile, and use Delete account at the bottom of the page.
• In the app: open Settings and choose Delete account.

You will be asked for your password and to type the word "delete".

Deletion happens straight away and cannot be undone. It removes:

• your account, passkeys, two-factor settings and signed-in devices;
• your whole collection: every coin, note and bullion item, including ones in the trash, every photo and video and its original file, and your sets, want lists, tags, storage locations and values;
• your public profile, and its visit records;
• the sales you recorded yourself in your collection, with any buyer details you typed;
• your links to pieces and views of your collection, which stop working at once;
• your blocks, and any blocks of you;
• your sign-in history, your feedback, your variety requests and your records of form errors.

What stays:

• a dated note that an account was deleted. It holds a scrambled code instead of your name or email address;
• server log lines that refer to your old account number;
• your transaction records, with your name, email address, phone number and street address removed, apart from the one exception described under Transaction records;
• reports you made, without your name, and reports about you, with the copies of the reported pages;
• copies in our database backups, for up to 14 days;
• copies of your photos and videos in the photo backup, until a later clean-up removes them;
• an invite request you made before you joined, if you made one. Write to us and we will delete it.

If other people also belong to your collection, you will need to hand it over or remove them before you can delete your account. StackerMint will tell you when that applies.

Wherever you live in the United States, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong;
• delete your information;
• stop sending you marketing email.

Most of your information you can see and change yourself, in your collection and in Settings. For anything else, write to support@stackermint.com from the email address on your account. We may ask you to confirm it is you before we act. We answer every request within 45 days.

California residents

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights above: to know, to get a copy, to correct and to delete. We do not sell or share personal information, so there is nothing to opt out of. We do not use sensitive personal information for anything beyond running your account and keeping it secure. We will not treat you differently, such as by refusing you service or charging you more, for using any of these rights. You can use an authorized agent to make a request for you, and we may ask the agent for proof that you gave them permission.

In the last 12 months, we collected these categories of personal information, all from you and your use of StackerMint:

• identifiers, such as your name, email address, account number, device name and IP address;
• account sign-in details, such as your password (stored as a one-way hash) and passkeys;
• commercial information, such as the purchase prices, values and sales you record in your collection, and your transaction records;
• internet activity, such as sign-in times, profile visits and the pages where errors happened;
• photos, videos and audio you upload;
• details you enter about other people, such as the buyers in sales you record;
• reports you make or that are made about you.

We use them for the purposes listed under How we use your information, and we disclose them only to the service providers listed above.

StackerMint is for adults. You must be 18 or older to use it, and it is not directed at children. If we learn that we hold information from someone under 18, we delete it.

Information travels between your browser or the app and StackerMint over an encrypted connection. Passwords are stored as one-way hashes, and two-factor secrets are stored encrypted. Only StackerMint staff can reach our admin tools. Photos are stored at web addresses that include a long random code, so they cannot be guessed; anyone given a photo's exact address can open it, which is how your public profile and links show your photos. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it, as the law requires.

When we change this policy, we update the date at the top of the page. If a change is material, we will also email you before it takes effect.

StackerMint LLC runs StackerMint. For privacy questions, requests and support, email support@stackermint.com.